moparisthebest
/
xeps
Mirror von https://github.com/moparisthebest/xeps
1
0
Fork 0
Code Issues Releases Wiki Aktivität

clarified potential DoS attack 

git-svn-id: file:///home/ksmith/gitmigration/svn/xmpp/trunk@3390 4b5297f7-1745-476d-ba37-a9c6900126ab
Dieser Commit ist enthalten in:
Unknown User 2009-09-08 20:21:30 +00:00
Ursprung 4e4b381d19
Commit 3acc0fdc84
1 geänderte Dateien mit 1 neuen und 1 gelöschten Zeilen
Statistiken anzeigen Patch-Datei herunterladen Vergleichs-Datei herunterladen Alle Dateien ausklappen Alle Dateien einklappen

2
xep-0170.xml
Datei anzeigen

@ -81,7 +81,7 @@
<p>That order MUST be followed if no other stream features are negotiated.</p>
</section2>
<section2 topic='Stream Compression' anchor='c2s-compress'>
<p>&xep0138; is negotiated when it is not possible to set up TLS compression for whatever reason. It seems safest to negotiate stream compression after negotiation of both TLS (to safely complete the negotiation) and SASL (to prevent certain denial-of-service attacks). Therefore the following order is RECOMMENDED:</p>
<p>&xep0138; is negotiated when it is not possible to set up TLS compression for whatever reason. It seems safest to negotiate stream compression after negotiation of both TLS (to safely complete the negotiation) and SASL (to prevent certain denial-of-service attacks caused by consumption of server resources for compression before the connecting entity is authenticated). Therefore the following order is RECOMMENDED:</p>
<ol>
<li>TLS</li>
<li>SASL</li>