I missed this statement about 0389 last time. This is incorrect, 0389 does not use stanzas pre-auth, it just has the ability to use stanzas to do the same thing post-auth because I wanted to be able to register with something other than the server. For example, you might want an admin console that exists post-auth if you're an admin that lets you register accounts on a MUC component (which requires stanzas to be routable). The IQs are not to be used pre-auth.
I will clarify this in the XEP; sorry for the confusion. —Sam On Wed, Nov 4, 2020, at 03:09, Georg Lukas wrote: > Well, I'm not an expert on authentication and registration mechanisms, > and I didn't want to become one just for solving an urgent practical > problem, but it looks like there is XEP-0389: Extensible In-Band > Registration, which *also* relies on unauthenticated IQs, that can be > moved into the right direction in the long term, and also some ongoing > work around SASL2. _______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
