IETF Logo Mail Archive

Re: [xmpp] IQ Handling vulnerabilities

Ben Campbell <ben@nostrum.com> Thu, 06 February 2014 23:22 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: xmpp@ietfa.amsl.com
Delivered-To: xmpp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC6E11A0511 for <xmpp@ietfa.amsl.com>; Thu, 6 Feb 2014 15:22:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.036
X-Spam-Level:
X-Spam-Status: No, score=-1.036 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aX3wgO__g9gq for <xmpp@ietfa.amsl.com>; Thu, 6 Feb 2014 15:22:25 -0800 (PST)
Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id E03E01A0426 for <xmpp@ietf.org>; Thu, 6 Feb 2014 15:22:24 -0800 (PST)
Received: from [10.0.1.29] (cpe-173-172-146-58.tx.res.rr.com [173.172.146.58]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id s16NM9hE075480 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 6 Feb 2014 17:22:10 -0600 (CST) (envelope-from ben@nostrum.com)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\))
From: Ben Campbell <ben@nostrum.com>
In-Reply-To: <CF194491.38AD3%jhildebr@cisco.com>
Date: Thu, 06 Feb 2014 17:22:09 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <2F5E925F-021D-408E-91D9-3CC5BEB6BEC6@nostrum.com>
References: <CAOb_FnxS-dMT85N7LHj5M9JWk3pL85=ugrDqaT7j5d28HBr0Cw@mail.gmail.com> <CF194491.38AD3%jhildebr@cisco.com>
To: Joe Hildebrand <jhildebr@cisco.com>
X-Mailer: Apple Mail (2.1827)
Received-SPF: pass (shaman.nostrum.com: 173.172.146.58 is authenticated by a trusted mechanism)
Cc: XMPP Working Group <xmpp@ietf.org>
Subject: Re: [xmpp] IQ Handling vulnerabilities
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/xmpp/>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Feb 2014 23:22:26 -0000

On Feb 6, 2014, at 3:58 PM, Joe Hildebrand (jhildebr) <jhildebr@cisco.com> wrote:

> (as co-chair)
> 
> Who else thinks we need to work on this?
> 
> Can we start with an individual I-D that lays out the problem and
> solution?  That would allow us to make good decisions about what the next
> step would be.  Kev, that might be pretty quick for you to write...

(As the other co-chair)

I think an individual I-D is the right way to go here, even if it just lays out the problem. (But solutions are also good!)

Thanks!

Ben.

v2.23.0 | Report a Bug | By Email