Re: [Security] Reminder :: Draft feedback on "C2C authentication using TLS"

[Jonathan Schleifer]

Am 25.08.2008 um 11:48 schrieb Dirk Meyer:

The other idea is to use disco#items .... while wanting to write down
an example I noticed that this would be a very bad hack. We could also
create our own query in the urn:xmpp:tmp:tlsauth namespace:

<iq type='get'
   from='[EMAIL PROTECTED]/balcony'
   to='[EMAIL PROTECTED]'
   id='info'>
 <query xmlns='urn:xmpp:tmp:tlsauth'/>
</iq>

<iq type='result'
   from='[EMAIL PROTECTED]'
   to='[EMAIL PROTECTED]/balcony'
   id='info'>
 <query xmlns='urn:xmpp:tmp:tlsauth'>
   <x509 fingerprint='certificate-fingerprint'/>
   <openpgp fingerprint='openpgp-fingerprint'/>
   <srp/>
 </query>
</iq>

--
Jonathan

We should have it in items IMO, so we can easily check and autonegotiate. We could just have entries there for every verification mechanism we support. Like urn:xmpp:c2ctls, urn:xmpp:c2ctls:x509, urn:xmpp:c2ctls:sas etc.

PGP.sig
Description: This is a digitally signed message part