From 3cc5b33e6f97f4c13f237f2f1b4577cff4432da1 Mon Sep 17 00:00:00 2001 From: Peter Saint-Andre Date: Tue, 28 Nov 2006 16:59:20 +0000 Subject: [PATCH] 1.3pre1 git-svn-id: file:///home/ksmith/gitmigration/svn/xmpp/trunk@231 4b5297f7-1745-476d-ba37-a9c6900126ab --- xep-0027.xml | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/xep-0027.xml b/xep-0027.xml index e3afaeb1..4da4c444 100644 --- a/xep-0027.xml +++ b/xep-0027.xml @@ -28,6 +28,12 @@ http://www.xmpp.org/schemas/x-signed.xsd &temas; + + 1.3pre1 + in progress, last updated 2006-11-28 + psa + Removed the unnecessary requirement that the presence status or message body must contain XML character data, since the empty string can be signed. + 1.2 2004-03-08 @@ -64,12 +70,7 @@

All operations described here are done with standard OpenPGP software such as GnuPG. All program output is US-ASCII armored output with the headers removed. This allows for easy transportation of the program output directly in the XML. All keys are exchanged using OpenPGP key servers, and usually are retrieved when a signed &PRESENCE; stanza is received (key retrieval does not happen in-band).

-

Signing enables a sender to verify that they sent a certain block of text. In Jabber, signing uses the 'jabber:x:signed' namespace, and is primarily used with &PRESENCE;, but may also be used with &MESSAGE;. Because signing requires a block of text, it creates new restrictions on the &PRESENCE; and &MESSAGE; stanzas:

-
    -
  • A &PRESENCE; stanza MUST have a <status> element containing XML character data.
    • -
  • A &MESSAGE; stanza MUST have a <body> element containing XML character data.
    • -
-

These requirements are necessary so that there is always common text to sign and verify against. When signing presence, the sender SHOULD sign the XML character data of the <status> element. The sender SHOULD sign presence using the private key whose KeyID corresponds to the public key to be used in encrypting messages (see below).

+

Signing enables a sender to verify that they sent a certain block of text. In Jabber, signing uses the 'jabber:x:signed' namespace, and is primarily used with &PRESENCE;, but may also be used with &MESSAGE;. The text that is signed MAY be the empty string. When signing presence, the sender SHOULD sign the XML character data of the <status> element. The sender SHOULD sign presence using the private key whose KeyID corresponds to the public key to be used in encrypting messages (see below).

<presence from='pgmillard@jabber.org/wj_dev2' to='jer@jabber.org'> <status>Online</status>