On 3/5/09 5:02 PM, Klaus Hartke wrote:
> Kevin Smith wrote:
>> I think that you send full-jid stanzas (to the right full jid!) over
>> the e2e, and anything to bare-jid, or other resources goes through the
>> server.
> 
> If the e2e path replaces the path through the server for a full jid and
> that full jid has the highest priority, should a stanza to the bare jid
> go through the server or over the e2e?

Through the server. The sender doesn't know how the server is going to
handle bare-JID stanzas (this mainly applies to message stanzas), and
it's not good for the sender to second-guess the server's delivery
decisions.

> Assume that Romeo had a secure conversation with Juliet over an e2e. He
> closed the text chat window, but the e2e is still active. Romeo double-
> clicks on Juliet in his contact list, a text chat window pops up. By
> default, his first <message/> will be addressed to Juliet's bare jid;

Romeo is an idiot. His client needs to be smart and re-use the e2e stream.

> his client will use Juliet's full jid as soon as it receives the first
> reply <message/>. Now, if Juliet's resource with the highest priority
> happens to be the one Romeo is having the secure e2e with, does the
> first message go through the server or over the e2e? Romeo probably does
> not understand why closing the chat window and immeditately re-opening
> it makes the conversation insecure and expects communication to be
> secure right away.

Agreed.

> Of course, a client could pop up a big warning that a secure e2e exists
> but is not being used ;-)

Nah, in that case I think it's best to keep using the e2e stream.

Peter

-- 
Peter Saint-Andre
https://stpeter.im/

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to