Re: [Standards] UPDATED: XEP-0220 (Server Dialback)

[Philipp Hancke]

Am 06.07.2011 19:30, schrieb XMPP Extensions Editor:

Version 0.11 of XEP-0220 (Server Dialback) has been released.

Abstract: This specification defines the Server Dialback protocol, which is 
used between XMPP servers to provide identity verification. Server Dialback 
uses the Domain Name System (DNS) as the basis for verifying identity; the 
basic approach is that when a receiving server accepts a server-to-server 
connection from an originating server, it does not process traffic over the 
connection until it has verified a key with an authoritative server for the 
domain asserted by the originating server. Although Server Dialback does not 
provide strong authentication or trusted federation and although it is subject 
to DNS poisoning attacks, it has effectively prevented most instances of 
address spoofing on the XMPP network since its development in the year 2000.

Changelog: Per list discussion, reverted the stream features versioning that 
was added to version 0.10, thus reverting to the format used in versions 0.5 
through 0.9 of the spec; corrected several errors in the examples. (psa)

Diff: http://xmpp.org/extensions/diff/api/xep/0220/diff/0.10/vs/0.11

URL: http://xmpp.org/extensions/xep-0220.html

Merely a bug report, more later next week:
http://xmpp.org/extensions/xep-0220.html#advertisement-errors
The text from 0.9 is needed here. Patch attached.

diff --git a/extensions/xep-0220.xml b/extensions/xep-0220.xml
index c0a4aa2..1272053 100644
--- a/extensions/xep-0220.xml
+++ b/extensions/xep-0220.xml
@@ -442,7 +442,7 @@ send: <db:verify
     </section3>
 
     <section3 topic="Dialback with Error Handling" anchor='advertisement-errors'>
-      <p>If a server supports graceful handling of dialback errors as described under Section 2.5, it MUST advertise that though a stream feature which is a &lt;dialback/&gt; element qualified by the 'urn:xmpp:features:dialback' namespace.</p>
+      <p>If a server supports graceful handling of dialback errors as described under Section 2.4, it MUST advertise that via a stream feature which is a &lt;dialback/&gt; element qualified by the 'urn:xmpp:features:dialback' namespace, including an empty &lt;errors/&gt; element.</p>
       <example caption="Stream Features With &lt;errors/&gt; Element"><![CDATA[
 <stream:features>
   <dialback xmlns='urn:xmpp:features:dialback'>