[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xmpp] SASL errors in 3920bis-03
On Tue, Nov 17, 2009 at 10:28 AM, Philipp Hancke <fippo at mail.symlynx.com> wrote:
If stream:from is set, the servers knows the users jid before offering the list of mechanisms and should not offer any weak mechanisms.
Exactly this was my thinking. Dumb client, why are you selecting a mechanism that hasn't been advertised. ;)
Sure if during usage of PLAIN or DIGEST-MD5 the server receives the username and decides this mechanism is too weak one could reply with a mechanism-too-weak error but the process with having to know stream:from is way cleaner.
Cheers,
Tobias
Note Well: Messages sent to this mailing list are the opinions
of the senders and do not imply endorsement by the IETF.