Sergei Golovan wrote:
Hi!While playing with XEP-0225 I've found two inconveniences: 1) (very small one) It states that the initial stream header SHOULD have 'from' attribute (and it should be set into a 'default' component hostname). Though the initial stream isn't authenticated yet and acts very similar to C2S stream, so is'd be better to omit 'from' attribute (like in C2S streams) and use domain either from authentication or bind it later.
I think it would be fine to change that SHOULD to MAY.
2) (more serious) As for me, it'd be much more convenient if hostname binding were REQUIRED. This would make all hostnames assigned to a component have equal rights, so any of them could be unbound. If a server supports only one hostname per connection it could simply report error on the second bind request. Another problem with optional hostname binding is that if a component haven't received stream features it can't decide whether it's because the binding isn't required or it's because of something wrong on a server side. And the last concern is that required binding is again looks more similar to C2S streams behavior (therefore it would allow to share library code for clients and components).
+1 /psa
smime.p7s
Description: S/MIME Cryptographic Signature
