On 11/20/09 2:45 AM, Dirk Meyer wrote:
> Peter Saint-Andre wrote:
>>> Has the e2e encryption / XTLS work advanced enough to do an e2e security
>>> sprint around Fosdem?
>> I think so.
> 
> I have a reference implementation. 

Excellent!

> XEP-0189 key management needs some
> more love by the pubsub versioning discussed on the pubsub list.

Agreed.

> BTW, I plan to update the XTLS draft soon with two changes:
> 
> 1. Make SRP optional if we prefer the leap of faith

Realistically I think that most people will prefer that, because they
have no reason to think anything else is important (and they don't have
another secure channel available anyway).

> 2. Specify the username in the SRP handshake to be the initiators fullJID

Why the full JID instead of the bare JID? Because the session is being
set up between a full JID pair?

Peter

-- 
Peter Saint-Andre
https://stpeter.im/


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
JDev mailing list
Forum: http://www.jabberforum.org/forumdisplay.php?f=20
Info: http://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: [email protected]
_______________________________________________

Reply via email to