Re: [xmpp] Fwd: I-D Action:draft-miller-3923bis-00.txt

On Mar 1, 2010, at 20:26, Kurt Zeilenga wrote:

> Peter, Matthew:
> 
> Why are there copies of the time stamp and thread id sent in the clear?
> 
> I would think that having in-the-clear copies would raise some security concerns.
> 

What's not normatively stated is that the visible <thread/> is (SHOULD, MUST?) be different than the encrypted version.  Clients use <thread/>s to note the conversation flow. That said, and now that I've stepped back from it for a while, I see the concern.

We didn't see the timestamp as something to be concerned with, however.

> Is there any particular reason why the time stamp inside the object to be signed is simply pre-append to the stanza instead of including it in an element of stanza?

This is how a work-in-progress implementation is doing it, and it so far is proving easy to deal with.  Attempting to embed the timestmap into the stanza will not work with <iq/>-style stanzas, and is the main reason we avoided that.

> 
> Regards, Kurt
> 
> On Mar 1, 2010, at 4:18 PM, Peter Saint-Andre wrote:
> 
>> FYI. This document sketches out an alternate approach to meeting our
>> end-to-end encryption requirements, if only to initiate more discussion
>> about the topic...
>> 
>> /psa
>> 
>> -------- Original Message --------
>> Subject: I-D Action:draft-miller-3923bis-00.txt
>> Date: Mon,  1 Mar 2010 16:15:01 -0800 (PST)
>> From: Internet-Drafts@ietf.org
>> Reply-To: internet-drafts@ietf.org
>> To: i-d-announce@ietf.org
>> 
>> A New Internet-Draft is available from the on-line Internet-Drafts
>> directories.
>> 
>> 	Title           : End-to-End Object Encryption for the Extensible
>> Messaging and Presence Protocol (XMPP)
>> 	Author(s)       : M. Miller, P. Saint-Andre
>> 	Filename        : draft-miller-3923bis-00.txt
>> 	Pages           : 10
>> 	Date            : 2010-03-01
>> 
>> This document defines a method of end-to-end object encryption for
>> the Extensible Messaging and Presence Protocol (XMPP).  The protocol
>> defined herein is a simplified version of the protocol defined in RFC
>> 3923.
>> 
>> A URL for this Internet-Draft is:
>> http://www.ietf.org/internet-drafts/draft-miller-3923bis-00.txt
>> 
>> 
>> _______________________________________________
>> xmpp mailing list
>> xmpp@ietf.org
>> https://www.ietf.org/mailman/listinfo/xmpp
> 
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp