diff --git a/xep-0152.xml b/xep-0152.xml index af970f74..d8622e94 100644 --- a/xep-0152.xml +++ b/xep-0152.xml @@ -11,7 +11,6 @@ &LEGALNOTICE; 0152 Proposed - 2013-03-19 Standards Track Standards Council @@ -24,6 +23,12 @@ reach &stpeter; &hildjj; + + 0.6 + 2013-12-02 + psa +

Further clarified the intent of the protocol.

+
0.5 2013-09-25 @@ -70,13 +75,13 @@ -

Sometimes it is desirable to augment instant messaging (IM) with another real-time communications medium, such as a voice conversation conducted over the traditional public switched telephone network (PSTN) or more recent Voice over Internet Protocol (VoIP) applications. In order to facilitate this functionality, a user needs to advertise the address(es) at which they can be reached. There are several possible ways to do this:

+

Sometimes it is desirable to augment instant messaging (IM) with another real-time communications medium, such as a voice conversation conducted over the traditional public switched telephone network (PSTN) or Voice over Internet Protocol (VoIP) applications. In order to facilitate this functionality, a user needs to advertise the address(es) at which they can be reached. There are several possible ways to do this:

-

This document defines methods for publishing addresses at which a user can be reached temporarily, as opposed to semi-permanent addresses of the kind that are more appropriately communicated in a user's vCard.

+

This document defines methods for publishing addresses at which a user can be reached temporarily, as opposed to semi-permanent addresses of the kind that are more appropriately communicated in a user's vCard. We illustrate this usage through the scenario of a user sending a reachability address upon entering a physical conference room and then sending an updated notification (without a reachability address) upon leaving the conference room. Similar scenarios might apply when an XMPP implementation is used with technologies such as WebRTC and in deployments of the combined use of SIP and XMPP ("CUSAX"; &rfc7081;).

@@ -120,7 +125,7 @@

To broadcast reachability addresses in presence information, a user's client includes the <reach/> element in the &PRESENCE; stanza it sends to its server.

-

For example, consider someone who walks into a conference room at the office. Via nearfield communication, the user's XMPP client might auto-discovery a 'tel:' URI for the room audio system and a 'sip:' URI for the room video system.

+

For example, consider someone who walks into a conference room at the office. Via nearfield communication, the user's XMPP client might auto-discover a 'tel:' URI for the room audio system and a 'sip:' URI for the room video system.

@@ -131,7 +136,7 @@ ]]>

The user's server then broadcasts that presence stanza to all entities who are subscribed to the user's presence:

+ @@ -229,8 +234,8 @@
-

To preserve network bandwidth, the sender SHOULD NOT include the <desc/> element unless that information is deemed necessary to enable communication.

-

A recipient SHOULD attempt communications with reachability addresses in the order that the <addr/> elements appear within the <reach/> element.

+

To preserve network bandwidth, the sender ought not include the <desc/> element unless that information is deemed necessary to enable communication.

+

A recipient ought to attempt communications with reachability addresses in the order that the <addr/> elements appear within the <reach/> element.

@@ -239,7 +244,7 @@

Security considerations for XMPP presence and PEP publication are described in RFC 6120, RFC 6121, XEP-0060, and XEP-0163.

- Advertising a telephone number, SIP URI, or other real-time communication address to one contact or to multiple contacts introduces the possibility of information leakage and subsequent attacks (e.g., unsolicited phone calls). Clients are advised to appropriately warn users about the dangers of such attacks. + Advertising a telephone number, SIP URI, or other real-time communication address to multiple contacts in an unencrypted way (e.g., via XMPP presence or PEP in cases where not all hops are TLS-protected) introduces the possibility of information leakage and subsequent attacks such as unsolicited phone calls. Clients are advised to appropriately warn users about the dangers of such attacks. Alternatively, if the address is especially sensitive (say, a hashname &rfc6920; for use in a system that enables direct private communication outside of XMPP), then a client could send it in a message that itself is end-to-end encrypted.