On Fri, 30 Apr 2004 16:45, Karsten Hilbert wrote:
> is what you are looking for. However, authentication issues
> are unresolved (we only use the interface locally) and that is
> what Dave was pointing out as reinventing CORBA eventually and
> Horst mentioned as being solvable by transporting Jabber
> content.

It is also solvable the "easy way" by
1.) disallowing plain http, requiring https
2.) via https, passing plain text authentication to retrieve a authentication 
token (since this is a stateless protocol)
3.) from now on, ping-pong the authentication token hash in the usual way

I prefer xml-rpc via jabber because it takes a lot more into account than just 
authentication and security.
For example: 
- on demand store-and foreward when a connection breaks down temporarily or 
episodically
- presence/absence discovery
- text and even videoconferencing via the same protocol and server
- and much more

Horst

Reply via email to