On 2013-02-21 01:43, XMPP Extensions Editor wrote: > 1. Is this specification needed to fill gaps in the XMPP protocol stack or to > clarify an existing protocol?
Yes. > 2. Does the specification solve the problem stated in the introduction and > requirements? Yes. > 3. Do you plan to implement this specification in your code? If not, why not? I have written an implementation for Prosody. http://prosody-modules.googlecode.com/hg/mod_bidi/ > 4. Do you have any security concerns related to this specification? The elevation of any method of domain spoofing to also include possible interception of outgoing stanzas. Mistakes by, or compromise of a CA, faulty certificate validation etc might make it possible to do a MITM without needing to do anything DNS related. > 5. Is the specification accurate and clearly written? Yes. -- Kim "Zash" Alvefur
signature.asc
Description: OpenPGP digital signature
