Kevin Smith wrote:
> I think that you send full-jid stanzas (to the right full jid!) over
> the e2e, and anything to bare-jid, or other resources goes through the
> server.

If the e2e path replaces the path through the server for a full jid and
that full jid has the highest priority, should a stanza to the bare jid
go through the server or over the e2e?

Assume that Romeo had a secure conversation with Juliet over an e2e. He
closed the text chat window, but the e2e is still active. Romeo double-
clicks on Juliet in his contact list, a text chat window pops up. By
default, his first <message/> will be addressed to Juliet's bare jid;
his client will use Juliet's full jid as soon as it receives the first
reply <message/>. Now, if Juliet's resource with the highest priority
happens to be the one Romeo is having the secure e2e with, does the
first message go through the server or over the e2e? Romeo probably does
not understand why closing the chat window and immeditately re-opening
it makes the conversation insecure and expects communication to be
secure right away.

Of course, a client could pop up a big warning that a secure e2e exists
but is not being used ;-)

--K.


Reply via email to