Re: [Standards] Proposed XMPP Extension: Best practices for password hashing and storage

2020-04-21 Thread Dave Cridland
On Tue, 21 Apr 2020 at 20:20, Sam Whited wrote: > Hi Dave et al, > > I'm not against publishing this as an RFC. However, despite the broad > scope of this XEP making it a good fit for the IETF in some ways, I > think there is value in having a document that contains specific > recommendations for

Re: [Standards] Proposed XMPP Extension: Best practices for password hashing and storage

2020-04-21 Thread Sam Whited
Hi Dave et al, I'm not against publishing this as an RFC. However, despite the broad scope of this XEP making it a good fit for the IETF in some ways, I think there is value in having a document that contains specific recommendations for the public Jabber network (and a few more general recommenda

Re: [Standards] Proposed XMPP Extension: Best practices for password hashing and storage

2020-04-21 Thread Dave Cridland
On Tue, 21 Apr 2020 at 11:50, wrote: > The XMPP Extensions Editor has received a proposal for a new XEP. > > Title: Best practices for password hashing and storage > Abstract: > This document outlines best practices for handling user passwords on > the public Jabber network for both clients and s

Re: [Standards] Proposed XMPP Extension: Best practices for password hashing and storage

2020-04-21 Thread Sam Whited
I'd like to quickly note that since submitting this I have written an internationalization considerations section that clarifies how and why the OpaqueString profile of PRECIS is applied to passwords on clients and servers. I'm holding off on submitting it until after the council votes on this prot

[Standards] Proposed XMPP Extension: Best practices for password hashing and storage

2020-04-21 Thread pep
The XMPP Extensions Editor has received a proposal for a new XEP. Title: Best practices for password hashing and storage Abstract: This document outlines best practices for handling user passwords on the public Jabber network for both clients and servers. URL: https://xmpp.org/extensions/inbox/pa