Re: [Standards] Binary data over XMPP

2007-11-09 Thread Justin Karneges
On Friday 09 November 2007 3:35 pm, Dave Cridland wrote: > ubiquitous encryption Best laugh of the day! Other protocols have been fighting this battle for years. Is XMPP so much different? I can see the headlines: "XMPP finally gets everyone in the world to use encryption. Email working grou

Re: [Standards] Question About XEP-0060 Authorization

2007-11-09 Thread Lindsay Oproman
Thanks Peter. Please do keep me updated. If I can be of any assistance, please let me know. I will continue to investigate possible alternatives as well. On Nov 9, 2007 1:01 PM, Peter Saint-Andre <[EMAIL PROTECTED]> wrote: > Lindsay Oproman wrote: > > Hello, > > > > I have a question about subscri

Re: [Standards] [Fwd: I-D Action:draft-cridland-sasl-tls-sessions-00.txt]

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 23:34 +, Dave Cridland pisze: > In particular, think of it in terms of a (mythical?) server that > supports XEP-0198 as well. jabberd 2.1 supports XEP-0198 although only on the very basic level. -- /\_./o__ Tomasz Sterna (/^/(_^^' Xiaoka.com ._.(_.)_

Re: [Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread Peter Saint-Andre
Rachel Blackman wrote: > > On Nov 9, 2007, at 3:55 PM, Peter Saint-Andre wrote: > >> Peter Saint-Andre wrote: >>> XMPP Extensions Editor wrote: The XMPP Extensions Editor has received a proposal for a new XEP. Title: Data Element Abstract: This document specifies a method

Re: [Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread Rachel Blackman
On Nov 9, 2007, at 3:55 PM, Peter Saint-Andre wrote: Peter Saint-Andre wrote: XMPP Extensions Editor wrote: The XMPP Extensions Editor has received a proposal for a new XEP. Title: Data Element Abstract: This document specifies a method for including small bits of binary data in an XMPP sta

Re: [Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread Peter Saint-Andre
Peter Saint-Andre wrote: > XMPP Extensions Editor wrote: >> The XMPP Extensions Editor has received a proposal for a new XEP. >> >> Title: Data Element >> >> Abstract: This document specifies a method for including small bits >> of binary data in an XMPP stanza via the data: URL scheme. >> >> URL:

Re: [Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread Dave Cridland
On Fri Nov 9 23:29:05 2007, XMPP Extensions Editor wrote: The XMPP Extensions Editor has received a proposal for a new XEP. And the spot's even red. Although the wrong shade. :-) Dave. -- Dave Cridland - mailto:[EMAIL PROTECTED] - xmpp:[EMAIL PROTECTED] - acap://acap.dave.cridland.net/byowne

Re: [Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread Peter Saint-Andre
XMPP Extensions Editor wrote: > The XMPP Extensions Editor has received a proposal for a new XEP. > > Title: Data Element > > Abstract: This document specifies a method for including small bits > of binary data in an XMPP stanza via the data: URL scheme. > > URL: http://www.xmpp.org/extensions/i

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Dave Cridland
On Fri Nov 9 18:37:08 2007, Rachel Blackman wrote: If we like to chant the 'XMPP is not really XML' mantra and the 'we must shave off every byte we can to spare the poor mobile users' mantras, that's great. I'm not chanting any mantras, sorry. If encrypted sessions become the rule, rath

[Standards] Proposed XMPP Extension: Data Element

2007-11-09 Thread XMPP Extensions Editor
The XMPP Extensions Editor has received a proposal for a new XEP. Title: Data Element Abstract: This document specifies a method for including small bits of binary data in an XMPP stanza via the data: URL scheme. URL: http://www.xmpp.org/extensions/inbox/data-element.html The XMPP Council will

Re: [Standards] [Fwd: I-D Action:draft-cridland-sasl-tls-sessions-00.txt]

2007-11-09 Thread Dave Cridland
On Fri Nov 9 19:47:01 2007, Peter Saint-Andre wrote: Looks like Dave got his I-D submitted on time... :) Yeah. One down, one to go. I'd be very interested in any comments from this list on this particular I-D, since I've mentioned it a couple of times. I think it has most impact to client

Re: [Standards] s2s blocking of abusive users

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 15:58 -0700, Peter Saint-Andre pisze: > > I meant rate limiting (simply stopping reading is enough - TCP will > > handle the rest :). > > Yes that is the most radical form of rate limiting. :) Oh. I realized that I'm being to sparse. I meant, "stopping reading for

Re: [Standards] s2s blocking of abusive users

2007-11-09 Thread Peter Saint-Andre
Tomasz Sterna wrote: > Dnia 09-11-2007, Pt o godzinie 13:42 -0700, Peter Saint-Andre pisze: >> Hmm. By "throttled me" do you mean "shut down s2s entirely" or "rate >> limited s2s"? > > I meant rate limiting (simply stopping reading is enough - TCP will > handle the rest :). Yes that is the most r

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 10:23 -0800, Justin Karneges pisze: > Each session is given a unique id. There is no "guessing" for the > server to > do, because no two sessions would be given the same id. Right. I've reread the XEP and there is no confusion for me anymore. > Why is this threa

Re: [Standards] s2s blocking of abusive users

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 13:42 -0700, Peter Saint-Andre pisze: > Hmm. By "throttled me" do you mean "shut down s2s entirely" or "rate > limited s2s"? I meant rate limiting (simply stopping reading is enough - TCP will handle the rest :). But as you mention, dropping the stream with clear ab

Re: [Standards] end-to-end encryption meeting

2007-11-09 Thread Peter Saint-Andre
Justin Karneges wrote: > On Thursday 08 November 2007 3:34 pm, Peter Saint-Andre wrote: >> In general, we decided (again?) that only ESessions and XTLS really make >> sense to pursue further (i.e., not OpenPGP, S/MIME, OTR, or xmlenc). > > To explain: > - At the meeting, Perfect Forward Secrecy

Re: [Standards] end-to-end encryption meeting

2007-11-09 Thread Justin Karneges
On Thursday 08 November 2007 3:34 pm, Peter Saint-Andre wrote: > In general, we decided (again?) that only ESessions and XTLS really make > sense to pursue further (i.e., not OpenPGP, S/MIME, OTR, or xmlenc). To explain: - At the meeting, Perfect Forward Secrecy (PFS) was decided to be a requir

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Kevin Smith
On 9 Nov 2007, at 20:49, Peter Saint-Andre wrote: So let's bite the bullet and say that In-Band Bytestreams is perfectly fine for small bits of data (and maybe even larger blobs of data). If we need something that's good for including really tiny bits of data in a stanza (e.g., via data: URL)

Re: [Standards] Question About XEP-0060 Authorization

2007-11-09 Thread Peter Saint-Andre
Lindsay Oproman wrote: > Hello, > > I have a question about subscription authorization that I was hoping > someone on this list might be able to help me with. I didn't see > anything in the documentation that answers my question. This may be > because I am new to XMPP and do not fully understand h

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Peter Saint-Andre
Rachel Blackman wrote: > I think we've lost sight of whatever the original problem we were trying > to solve was (inline images? Size of binary blobs to mobiles?) and have > become caught up in hypothetical solutions which may no longer be > directly connected to the issue. :) Right! So let's

Re: [Standards] s2s blocking of abusive users

2007-11-09 Thread Peter Saint-Andre
Tomasz Sterna wrote: > Dnia 08-11-2007, Cz o godzinie 13:15 -0700, Peter Saint-Andre pisze: >> [..] Unfortunately we did not >> have a way to ask the sending domain to shut off traffic for just those >> accounts, so we were forced to temporarily shut down all s2s traffic >> between jabber.org and t

[Standards] [Fwd: Last Call: draft-ietf-sieve-notify-xmpp (Sieve Notification Mechanism: xmpp) to Proposed Standard]

2007-11-09 Thread Peter Saint-Andre
FYI. Original Message To: IETF-Announce <[EMAIL PROTECTED]> From: The IESG <[EMAIL PROTECTED]> Date: Fri, 09 Nov 2007 10:30:08 -0500 Cc: [EMAIL PROTECTED] Subject: Last Call: draft-ietf-sieve-notify-xmpp (Sieve Notification Mechanism: xmpp) to Proposed Standard The IESG has rece

[Standards] [Fwd: I-D Action:draft-cridland-sasl-tls-sessions-00.txt]

2007-11-09 Thread Peter Saint-Andre
Looks like Dave got his I-D submitted on time... :) Original Message To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Date: Fri, 09 Nov 2007 10:00:01 -0500 Subject: I-D Action:draft-cridland-sasl-tls-sessions-00.txt A New Internet-Draft is available from the on-line Internet-Drafts

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Tobias Markmann
Exactly, it doesn't matter what character the already available methods/implementation output as long as they don't output more than 101 different characters. If they output one we can't use we just replace it with one we can use. cheers Tobias On Nov 9, 2007 7:45 PM, Michal 'vorner' Vaner <[EMAI

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Michal 'vorner' Vaner
Hello On Fri, Nov 09, 2007 at 10:01:39AM -0700, Joe Hildebrand wrote: > > On Nov 9, 2007, at 8:47 AM, Tobias Markmann wrote: > >> There are already several binary-to-text encodings which perform a bit >> better than Base64, two of them are: >> >> 1. http://en.wikipedia.org/wiki/ASCII85 invented by

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Rachel Blackman
On Nov 9, 2007, at 10:27 AM, Rachel Blackman wrote: On Nov 9, 2007, at 8:47 AM, Tobias Markmann wrote: There are already several binary-to-text encodings which perform a bit better than Base64, two of them are: 1. http://en.wikipedia.org/wiki/ASCII85 invented by Adobe 2. http://base91.sour

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Rachel Blackman
On Nov 9, 2007, at 8:47 AM, Tobias Markmann wrote: There are already several binary-to-text encodings which perform a bit better than Base64, two of them are: 1. http://en.wikipedia.org/wiki/ASCII85 invented by Adobe 2. http://base91.sourceforge.net/ Both of those seem to allow < and &, whi

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Justin Karneges
On Friday 09 November 2007 1:10 am, Tomasz Sterna wrote: > Dnia 08-11-2007, Cz o godzinie 11:11 -0800, Justin Karneges pisze: > > I mean: in the > > > > > unlucky case of an entity having two open sessions and losing both > > > > of > > > > > them, how can the server decide which is the session to

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Robin Redeker
On Fri, Nov 09, 2007 at 10:01:39AM -0700, Joe Hildebrand wrote: > > On Nov 9, 2007, at 8:47 AM, Tobias Markmann wrote: > > >There are already several binary-to-text encodings which perform a bit > >better than Base64, two of them are: > > > >1. http://en.wikipedia.org/wiki/ASCII85 invented by Ado

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Joe Hildebrand
On Nov 9, 2007, at 8:47 AM, Tobias Markmann wrote: There are already several binary-to-text encodings which perform a bit better than Base64, two of them are: 1. http://en.wikipedia.org/wiki/ASCII85 invented by Adobe 2. http://base91.sourceforge.net/ Both of those seem to allow < and &, whic

Re: [Standards] OpenID for XMPP (Was: Authorization over HTTP)

2007-11-09 Thread anders conbere
On Nov 9, 2007 8:20 AM, Tomasz Sterna <[EMAIL PROTECTED]> wrote: > Dnia 09-11-2007, Pt o godzinie 07:39 -0800, anders conbere pisze: > > This is exactly why I'm talking about, and why openID is not a good > > solution here. OpenID is fantastic at "prooving you're the user you > > say you are" this

Re: [Standards] OpenID for XMPP (Was: Authorization over HTTP)

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 07:39 -0800, anders conbere pisze: > This is exactly why I'm talking about, and why openID is not a good > solution here. OpenID is fantastic at "prooving you're the user you > say you are" this means that we could safely /Authenticate/ with a > jabber server. but we

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Tobias Markmann
There are already several binary-to-text encodings which perform a bit better than Base64, two of them are: 1. http://en.wikipedia.org/wiki/ASCII85 invented by Adobe 2. http://base91.sourceforge.net/ cheers Tobias Markmann On Nov 9, 2007 10:29 AM, Michal 'vorner' Vaner <[EMAIL PROTECTED]> wrote:

Re: [Standards] Authorization over HTTP

2007-11-09 Thread anders conbere
On Nov 9, 2007 6:09 AM, Dave Cridland <[EMAIL PROTECTED]> wrote: > On Thu Nov 8 17:49:28 2007, anders conbere wrote: > > Okay... so given that use case (and maybe this is a use case that > > the > > xmpp foundation doesn't want to get into) the best way I can see for > > easing the task for develo

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Dave Cridland
On Thu Nov 8 17:49:28 2007, anders conbere wrote: Okay... so given that use case (and maybe this is a use case that the xmpp foundation doesn't want to get into) the best way I can see for easing the task for developers is creating an authorization scheme, that allows me to pass of the authent

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Michal 'vorner' Vaner
Hello On Fri, Nov 09, 2007 at 12:42:01PM +0100, Tomasz Sterna wrote: > Dnia 09-11-2007, Pt o godzinie 12:06 +0100, Michal 'vorner' Vaner pisze: > > Well, I ment something else. I want to connect to my XMPP server from > > the cafe. So I (at home) generate single-use password on the server > > and

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 12:06 +0100, Michal 'vorner' Vaner pisze: > Well, I ment something else. I want to connect to my XMPP server from > the cafe. So I (at home) generate single-use password on the server > and log in by that. So, how exactly is it related to Subject "Authorization over

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Michal 'vorner' Vaner
Hello On Fri, Nov 09, 2007 at 11:07:03AM +0100, Tomasz Sterna wrote: > Dnia 09-11-2007, Pt o godzinie 10:40 +0100, Michal 'vorner' Vaner pisze: > > Some kind of single-use password? Could be useful for other things too, > > like I want to log in from a internet coffee I do not trust at all. > > A

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 09:15 +, Kevin Smith pisze: > a way to authenticate a third party as you, without > revealing your credentials to them. This is not the way to go. I would not trust a third party, for full access to all my server data. Correct way to go, is to allow a third pa

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 10:40 +0100, Michal 'vorner' Vaner pisze: > Some kind of single-use password? Could be useful for other things too, > like I want to log in from a internet coffee I do not trust at all. And again OpenID is a solution here. You are in an internet cafe, and type http:

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Tomasz Sterna
Dnia 09-11-2007, Pt o godzinie 10:29 +0100, Michal 'vorner' Vaner pisze: > put characters in line, strike out all the ones you can't send > and take the first 256. Thanks Michal. Couldn't word out it better. :-) English is not my native language... still. -- /\_./o__ Tomasz Sterna (/^/(_^^'

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Michal 'vorner' Vaner
Hello On Fri, Nov 09, 2007 at 09:15:32AM +, Kevin Smith wrote: > I'm not sure that's really true, what Anders is looking for, I believe, is > a way to authenticate a third party as you, without revealing your > credentials to them. This seems a reasonable use case to me, from what I > under

Re: [Standards] XEP-0060: pubsub feature for RFC 5023?

2007-11-09 Thread Tomasz Sterna
Dnia 08-11-2007, Cz o godzinie 08:43 -0700, Peter Saint-Andre pisze: > 1. Enable AtomPub server implementations to output published data to > XMPP pubsub clients. This is defined draft-saintandre-atompub-notify. > > 2. Enable XMPP pubsub server implementations to accept publish > requests > from A

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Michal 'vorner' Vaner
Hello On Fri, Nov 09, 2007 at 10:18:51AM +0100, Matthias Wimmer wrote: > Hi Thomasz! > > Tomasz Sterna schrieb: > > Simplest that comes to mind: > > Let's take first 256 allowable UTF-8 characters and assign them to 256 > > values of a single byte. > > It is not possible to sent the complete set

Re: [Standards] s2s blocking of abusive users

2007-11-09 Thread Tomasz Sterna
Dnia 08-11-2007, Cz o godzinie 13:15 -0700, Peter Saint-Andre pisze: > [..] Unfortunately we did not > have a way to ask the sending domain to shut off traffic for just those > accounts, so we were forced to temporarily shut down all s2s traffic > between jabber.org and the sending domain. This is

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Matthias Wimmer
Hi Thomasz! Tomasz Sterna schrieb: > Simplest that comes to mind: > Let's take first 256 allowable UTF-8 characters and assign them to 256 > values of a single byte. It is not possible to sent the complete set of the first 256 Unicode code points within XML. E.g. U+ cannot be present in an XM

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Kevin Smith
On 9 Nov 2007, at 09:07, Tomasz Sterna wrote: So you want to give access to user private data to a remote web server via HTTP, right? Designing protocols how web servers talk to each other, is a job of W3C, not XSF. We design ways how XMPP servers and clients talk to each other. My personal su

Re: [Standards] Binary data over XMPP

2007-11-09 Thread Tomasz Sterna
Dnia 08-11-2007, Cz o godzinie 11:11 -0800, Justin Karneges pisze: > I mean: in the > > unlucky case of an entity having two open sessions and losing both > of > > them, how can the server decide which is the session to recover, but > > adding some semantics to the ids? > > When you connect again,

Re: [Standards] Authorization over HTTP

2007-11-09 Thread Tomasz Sterna
Dnia 08-11-2007, Cz o godzinie 09:36 -0800, anders conbere pisze: > As far as I understand it XEP-0070 is for granting a user access to > restricted resources on a /web host/ based on if they pass > authentication with the jabber server. I'm actually interested in > working in a way somewhat backwa