Merge branch 'feature/protoxep-omemo-media-sharing' into premerge

This commit is contained in:
Jonas Schäfer 2021-01-12 16:49:19 +01:00
commit 19d8872521
1 changed files with 15 additions and 1 deletions

View File

@ -11,7 +11,7 @@
@ -27,6 +27,17 @@
<li>Resubmitted on the Historical track.</li>
<li>Added a section on IANA considerations.</li>
@ -70,4 +81,7 @@ data:image/jpeg,/9j/4AAQSkZJRgABAQEBLAEsAAD…]]></code>
<section1 topic='Security Considerations' anchor='security'>
<p>A aesgcm URL MUST never be linkified and clients MUST NOT offer another direct way for users to open them in a browser as this could leak the anchor with the encryption key to the server operator. This is also the reason the aesgcm URL was choosen in the first place to prevent users from accidentally opening a HTTP URL in the browser.</p>
<section1 topic='IANA Considerations' anchor='iana'>
<p>The aesgcm scheme is not registered at the IANA, and it probably shouldnt be as it is mostly a hack in order to work around the limitations of &xep0384; version 0.3.0 with regards to the extensibility, as this extension could only encrypt the <code>&lt;body/&gt;</code> of a message.</p>