On 16 February 2016 at 19:01, Thijs Alkemade <[email protected]> wrote:
> > > On 16 feb. 2016, at 17:18, XMPP Extensions Editor <[email protected]> > wrote: > > > > The XMPP Extensions Editor has received a proposal for a new XEP. > > > > Title: Instant Stream Resumption > > > > Abstract: This specification introduces an mechanism for instant > > stream resumption, based on Stream Management (XEP-0198), allowing > > XMPP entities to instantaneously resume an XMPP stream. > > > > URL: http://xmpp.org/extensions/inbox/isr.html > > > > The XMPP Council will decide in the next two weeks whether to accept > this proposal as an official XEP. > > > I'll just repeat my point that all quick connection attempts so far seem to > throw out mutual authentication without hesitation. That may be an > acceptable > trade-off in certain scenarios, but it should be emphasized that it > decreases > security. > > I was thinking much the same with respect to channel binding. I'd be curious as to whether something based around Kurt's YAP design might work? https://tools.ietf.org/html/draft-zeilenga-sasl-yap-06 Dave.
_______________________________________________ Standards mailing list Info: http://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
