From 0f3629bc87c7bb2b77bdc914e91d454b500f85b8 Mon Sep 17 00:00:00 2001
From: Sam Whited
This specification solves these problems by decoupling anonymous identity - management from authentication. + management from authentication (auth) and authorization (authz). This allows logged in users (authenticated or anonymous at the server operators disgression) to request a new temporary identifier, a "burner" JID, which may be used by its owner to construct a new session with the - server that is anonymous to third parties but is (optionally) locally - authenticated. + server that is authorized to communicate anonymously with third parties and + is (optionally) locally authenticated.
It may be impractical to store verification information for every burner JID issued by the system. - To this end servers that implement this specification may choose to encode + To this end servers that implement this specification MAY choose to encode information into the localpart of issued burner JIDs which can be verified when a user attempts to authorize a new session to use the burner JID. If an implementation chooses to do this it is RECOMMENDED that an