mirror of
https://github.com/moparisthebest/xeps
synced 2024-11-21 16:55:07 -05:00
0.2
This commit is contained in:
Peter Saint-Andre
parent
d9ebb7365a
commit
76efa4a694
281
xep-0305.xml
281
xep-0305.xml
@ -7,22 +7,30 @@
|
||||
<xep>
|
||||
<header>
|
||||
<title>XMPP Quickstart</title>
|
||||
<abstract>This document defines methods for speeding the process of connecting or reconnecting to an XMPP.</abstract>
|
||||
<abstract>This document defines methods for speeding the process of connecting or reconnecting to an XMPP server.</abstract>
|
||||
&LEGALNOTICE;
|
||||
<number>0305</number>
|
||||
<status>Deferred</status>
|
||||
<status>Experimental</status>
|
||||
<type>Standards Track</type>
|
||||
<sig>Standards</sig>
|
||||
<dependencies>
|
||||
<spec>RFC 5077</spec>
|
||||
<spec>RFC 6120</spec>
|
||||
<spec>XEP-0115</spec>
|
||||
<spec>XEP-0124</spec>
|
||||
<spec>XEP-0206</spec>
|
||||
<spec>XEP-0198</spec>
|
||||
</dependencies>
|
||||
<supersedes/>
|
||||
<supersededby/>
|
||||
<shortname>N/A</shortname>
|
||||
&stpeter;
|
||||
<revision>
|
||||
<version>0.2</version>
|
||||
<date>2012-12-19</date>
|
||||
<initials>psa</initials>
|
||||
<remark><p>Cleaned up text and examples, and added material about the HTTP bindings (currently only BOSH, with WebSocket to be added in a future revision).</p></remark>
|
||||
</revision>
|
||||
<revision>
|
||||
<version>0.1</version>
|
||||
<date>2011-08-25</date>
|
||||
@ -36,27 +44,37 @@
|
||||
<remark><p>Rough draft.</p></remark>
|
||||
</revision>
|
||||
</header>
|
||||
|
||||
<section1 topic='Introduction' anchor='intro'>
|
||||
<p>Establishing an XMPP session requires a fairly large number of round trips between the initiating entity and the receiving entity. In many deployment scenarios, it would be helpful to reduce the number of round trips and, in general, the time needed to establish a session. This document defines protocols and best practices to do just that.</p>
|
||||
<p>Note: Various parts of this document might be moved to separate documents at some point.</p>
|
||||
<p>Establishing an XMPP session requires a fairly large number of round trips between the initiating entity and the receiving entity. In many deployment scenarios, it would be helpful to reduce the number of round trips and therefore the time needed to establish a session. This document defines protocols and best practices to do just that.</p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='Preparing to Connect' anchor='prepare'>
|
||||
<p>In accordance with &rfc6120;, before attempting to establish a stream the initiating entity needs to determine the IP address and port at which to connect, usually by means of DNS lookups as described in Section 3.2 of <cite>RFC 6120</cite>. Implementations SHOULD cache the results of DNS lookups in order to avoid this step whenever possible.</p>
|
||||
<p>In accordance with &rfc6120;, before attempting to establish a stream over TCP the initiating entity needs to determine the IP address and port at which to connect, usually by means of DNS lookups as described in Section 3.2 of <cite>RFC 6120</cite>. Implementations SHOULD cache the results of DNS lookups in order to avoid this step whenever possible. Similar considerations apply to connections established over one of the HTTP bindings, i.e., either BOSH (see &xep0124; and &xep0206;) or WebSocket (see &rfc6455; and &xmppoverwebsocket;).</p>
|
||||
<p>XMPP applications SHOULD cache whatever information they can about the peer, especially stream features data and &xep0030; information. To facilitate such caching, servers SHOULD include &xep0115; data in stream features as shown in Section 6.3 of <cite>XEP-0115</cite>. Note that for maximum benefit the server MUST include all of the stream features it supports in its replies to "disco#info" queries (i.e., not advertise such features only during stream establishment).</p>
|
||||
<p>XMPP clients SHOULD cache roster information, and servers SHOULD make such caching possible, using &xep0237; as subsequently included in Section 2.1.1 of &rfc6121;.</p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='Pipelining' anchor='pipelining'>
|
||||
<p>One method of speeding the connection process is pipelining of requests, as in &rfc2920; and the QUICKSTART extension proposed for SMTP (&smtpquickstart;). The application of similar principles to XMPP was originally suggested by Tony Finch in February 2008 <<link url='http://mail.jabber.org/pipermail/standards/2008-February/017966.html'>http://mail.jabber.org/pipermail/standards/2008-February/017966.html</link>>.</p>
|
||||
<p>The primary method of speeding the connection process is pipelining of requests, as in &rfc2920; and the QUICKSTART extension proposed for SMTP (&smtpquickstart;). The application of similar principles to XMPP was originally suggested by Tony Finch in February 2008 <<link url='http://mail.jabber.org/pipermail/standards/2008-February/017966.html'>http://mail.jabber.org/pipermail/standards/2008-February/017966.html</link>>.</p>
|
||||
<p>In essence, pipelining relies on two assumptions:</p>
|
||||
<ol>
|
||||
<li>The parties to a stream can proactively send multiple XMPP-related "commands" in a single TCP packet (as one simple example, the receiving entity can send both the response stream header and stream features in a single packet).</li>
|
||||
<li>The features that the receiving entity supports (e.g., stream features and SASL mechanisms) are stable over time, which means the initiating entity can assume support for certain features and send certain XMPP-related commands without discovering again that the receiving entity supports them.</li>
|
||||
<li>The features that the receiving entity supports (e.g., stream features and SASL mechanisms) are stable over time, which means the initiating entity can assume support for certain features and send certain XMPP-related commands without discovering at the time of each connection attempt that the receiving entity supports them.</li>
|
||||
</ol>
|
||||
<p>Together, these assumptions enable the parties to reduce the number of round trips needed to complete the stream negotiation process.</p>
|
||||
<p><em>Note well that pipelining at the XMPP layer is not to be confused with HTTP pipelining, which was added to HTTP in version 1.1 and which is not encouraged when using the HTTP bindings for XMPP.</em></p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='Discovery' anchor='discovery'>
|
||||
<p>If an XMPP server supports pipelining, it MUST advertise a stream feature of <pipelining xmlns='urn:xmpp:features:pipelining'/>.</p>
|
||||
<p>If both parties support pipelining, they can proceed as follows (the examples use the XML from Section 9.1 of <cite>RFC 6120</cite> for the client-server stream establishment, but the same principles apply to server-to-server streams).</p>
|
||||
<p>In Step 1, the client assumes that the server supports the XMPP STARTTLS extension so it pipelines its initial stream header, the <starttls/> command, and the TLS ClientHello message.</p>
|
||||
<example caption='Step 1: Client Initiation'><![CDATA[
|
||||
<p>As noted, a server SHOULD also include its entity capabilities data in stream features as shown in Section 6.3 of <cite>XEP-0115</cite>.</p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='TCP Binding' anchor='tcp'>
|
||||
<p>If both parties support pipelining, they can proceed as follows over the TCP binding (the examples use the XML from Section 9.1 of <cite>RFC 6120</cite> for the client-server stream establishment, but the same principles apply to server-to-server streams).</p>
|
||||
<p>In the client-to-server half of the first exchange, the client assumes that the server supports the XMPP STARTTLS extension so it pipelines its initial stream header, the <starttls/> command, and the TLS ClientHello message.</p>
|
||||
<example caption='Client Initiation'><![CDATA[
|
||||
<stream:stream
|
||||
from='juliet@im.example.com'
|
||||
to='im.example.com'
|
||||
@ -67,8 +85,8 @@
|
||||
<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
|
||||
TLS ClientHello
|
||||
]]></example>
|
||||
<p>In Step 2, the server pipelines its response stream header, stream features advertisement, STARTTLS <proceed/> response, and TLS ServerHello messages (which might include ServerHello, Certificate, ServerKeyExchange, CertificateRequest, and ServerHelloDone -- see &rfc5246; for details).</p>
|
||||
<example caption='Step 2: Server Response to Initiation'><![CDATA[
|
||||
<p>In the server-to-client half of the first exchange, the server pipelines its response stream header, stream features advertisement, STARTTLS <proceed/> response, and TLS ServerHello messages (which might include ServerHello, Certificate, ServerKeyExchange, CertificateRequest, and ServerHelloDone -- see &rfc5246; for details).</p>
|
||||
<example caption='Server Response to Initiation'><![CDATA[
|
||||
<stream:stream
|
||||
from='im.example.com'
|
||||
id='t7AMCin9zjMNwQKDnplntZPIDEI='
|
||||
@ -90,13 +108,10 @@ TLS ClientHello
|
||||
<proceed xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
|
||||
TLS ServerHello
|
||||
]]></example>
|
||||
<p>In Step 3, the parties complete the TLS negotiation.</p>
|
||||
<example caption='Step 3: TLS Handshake'><![CDATA[
|
||||
Client might send some combination of Certificate, ClientKeyExchange,
|
||||
CertificateVerify, ChangeCipherSpec, and Finished (see RFC 5246)
|
||||
]]></example>
|
||||
<p>In Step 4, the server knows that the client will need to restart the stream so it proactively attaches its response stream header and stream features after the TLS Finished message.</p>
|
||||
<example caption='Step 4: Server Proactively Restarts Stream'><![CDATA[
|
||||
<p>Without pipelining, the foregoing exchange would require 3 round trips; with pipelining it requires 1 round trip.</p>
|
||||
<p>Now the parties complete the TLS negotiation; for our purposes we don't count these round trips because they are the same no matter whether we use pipelining or not (i.e., some combination of the TLS messages specified in RFC 5246).</p>
|
||||
<p>At the end of the TLS negotiation, the server knows that the client will need to restart the stream so it proactively attaches its response stream header and stream features in the same TCP packet at the TLS Finished message, thus starting the next exchange.</p>
|
||||
<example caption='Server Proactively Restarts Stream and Sends Stream Features'><![CDATA[
|
||||
TLS Finished
|
||||
<stream:stream
|
||||
from='im.example.com'
|
||||
@ -119,8 +134,8 @@ TLS Finished
|
||||
ver='ItBTI0XLDFvVxZ72NQElAzKS9sU='/>
|
||||
</stream:features>
|
||||
]]></example>
|
||||
<p>In Step 5, the client pipelines its initial stream header with the command for initiating the SASL authentication process (including SASL "initial response" data as explained in Section 6.3.10 of <cite>RFC 6120</cite> to reduce the number of round trips).</p>
|
||||
<example caption='Step 5: Client Initiates SASL Authentication'><![CDATA[
|
||||
<p>In response, the client pipelines its initial stream header with the command for initiating the SASL authentication process (including, if appropriate for the SASL mechanism used, the "initial response" data as explained in Section 6.3.10 of <cite>RFC 6120</cite>).</p>
|
||||
<example caption='Client Initiates SASL Authentication'><![CDATA[
|
||||
<stream:stream
|
||||
from='juliet@im.example.com'
|
||||
to='im.example.com'
|
||||
@ -133,16 +148,10 @@ TLS Finished
|
||||
biwsbj1qdWxpZXQscj1vTXNUQUF3QUFBQU1BQUFBTlAwVEFBQUFBQUJQVTBBQQ==
|
||||
</auth>
|
||||
]]></example>
|
||||
<p>At this point the client and server might exchange multiple SASL-related messages, depending on the SASL mechanism in use. This specification does not attempt to reduce the number of round trips involved in the challenge-response sequence.</p>
|
||||
<example caption='Step 6: Server Sends SASL Challenge'><![CDATA[
|
||||
<challenge xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
|
||||
cj1vTXNUQUF3QUFBQU1BQUFBTlAwVEFBQUFBQUJQVTBBQWUxMjQ2OTViLTY5Y
|
||||
TktNGRlNi05YzMwLWI1MWIzODA4YzU5ZSxzPU5qaGtZVE0wTURndE5HWTBaaT
|
||||
AwTmpkbUxUa3hNbVV0TkRsbU5UTm1ORE5rTURNeixpPTQwOTY=
|
||||
</challenge>
|
||||
]]></example>
|
||||
<p>When the client suspects that it is sending its final SASL response, it SHOULD append an initial stream header and resource binding request.</p>
|
||||
<example caption='Step 7: Client Sends Final SASL Response with Stream Header and Bind Request'><![CDATA[
|
||||
<p>Without pipelining, the second exchange would require another 2 round trips; with pipelining it requires only 1.</p>
|
||||
<p>At this point the client and server might exchange multiple SASL-related messages, depending on the SASL mechanism in use. Because this specification does not attempt to reduce the number of round trips involved in the challenge-response sequence, we do not describe these exchanges here.</p>
|
||||
<p>When the client suspects that it is sending its final SASL response, with pipelining it appends an initial stream header and resource binding request.</p>
|
||||
<example caption='Client Sends Final SASL Response with Stream Header and Bind Request'><![CDATA[
|
||||
<response xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
|
||||
Yz1iaXdzLHI9b01zVEFBd0FBQUFNQUFBQU5QMFRBQUFBQUFCUFUwQUFlMTI0N
|
||||
jk1Yi02OWE5LTRkZTYtOWMzMC1iNTFiMzgwOGM1OWUscD1VQTU3dE0vU3ZwQV
|
||||
@ -161,8 +170,8 @@ TLS Finished
|
||||
</bind>
|
||||
</iq>
|
||||
]]></example>
|
||||
<p>In Step 8, the server informs the client of SASL success (including "additional data with success" as explained in Section 6.3.10 of <cite>RFC 6120</cite> to reduce the number of round trips), sends a response stream header and stream features, and informs the client of successful resource binding.</p>
|
||||
<example caption='Step 8: Server Accepts Bind Request'><![CDATA[
|
||||
<p>The server then informs the client of SASL success (including "additional data with success" as explained in Section 6.3.10 of <cite>RFC 6120</cite>), sends a response stream header and stream features, and informs the client of successful resource binding.</p>
|
||||
<example caption='Server Accepts Bind Request'><![CDATA[
|
||||
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
dj1wTk5ERlZFUXh1WHhDb1NFaVc4R0VaKzFSU289
|
||||
</success>
|
||||
@ -191,16 +200,216 @@ TLS Finished
|
||||
</bind>
|
||||
</iq>
|
||||
]]></example>
|
||||
<p>The XMPP stream negotiation process in <cite>RFC 6120</cite> required at least 19 round trips (including 4 for TLS negotiation). With pipelining, the number of round trips is reduced to 8.</p>
|
||||
<p>Without pipelining, this exchange would require another 3 round trips; with pipelining it requires only 1.</p>
|
||||
<p>Therefore, without pipelining the XMPP exchanges for stream establishment require at least 6 round trips (and perhaps more depending on the SASL mechanism used); with pipelining the minimum number of round trips is 3.</p>
|
||||
<p>Naturally, for typical client-to-server sessions, additional round trips are needed so that the client can gather service discovery information, retrieve the roster, etc. As noted, these steps can be reduced or eliminated by using entity capabilities and roster versioning.</p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='HTTP Bindings' anchor='http'>
|
||||
<p>In the HTTP bindings (BOSH and WebSocket) channel encryption occurs at the HTTP layer and therefore the first exchange shown above for the TCP binding is not used.</p>
|
||||
<p>For now, this section focuses on BOSH. A future version of this document will discuss WebSocket (once draft-moffitt-xmpp-over-websocket has been updated to include examples).</p>
|
||||
<p>When pipelining is used, a BOSH client can include its XMPP authentication (SASL) request in the BOSH session creation request, as shown in the following example.</p>
|
||||
<example caption="BOSH Session Request with Pipelined SASL Authentication Request"><![CDATA[
|
||||
POST /webclient HTTP/1.1
|
||||
Host: httpcm.jabber.org
|
||||
Accept-Encoding: gzip, deflate
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 104
|
||||
|
||||
<body content='text/xml; charset=utf-8'
|
||||
from='user@example.com'
|
||||
hold='1'
|
||||
rid='1573741820'
|
||||
to='example.com'
|
||||
route='xmpp:example.com:9999'
|
||||
secure='true'
|
||||
wait='60'
|
||||
xml:lang='en'
|
||||
xmpp:version='1.0'
|
||||
xmlns='http://jabber.org/protocol/httpbind'
|
||||
xmlns:xmpp='urn:xmpp:xbosh'>
|
||||
<auth xmlns="urn:ietf:params:xml:ns:xmpp-sasl"
|
||||
mechanism="SCRAM-SHA-1">
|
||||
biwsbj1qdWxpZXQscj1vTXNUQUF3QUFBQU1BQUFBTlAwVEFBQUFBQUJQVTBBQQ==
|
||||
</auth>
|
||||
</body>
|
||||
]]></example>
|
||||
<p>Note: If the client does not expect to receive a SASL challenge from the server but simply a success or failure notification (e.g., when using a simpler SASL mechanism such as PLAIN &rfc4616;), then it can also pipeline its XMPP resource binding request with the BOSH session creation request.</p>
|
||||
<p>The BOSH connection manager then returns a session creation response with a pipelined SASL authentication response.</p>
|
||||
<example caption="Session Creation Response with Pipelined SASL Authentication Response"><![CDATA[
|
||||
HTTP/1.1 200 OK
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 674
|
||||
|
||||
<body wait='60'
|
||||
inactivity='30'
|
||||
polling='5'
|
||||
requests='2'
|
||||
hold='1'
|
||||
from='example.com'
|
||||
accept='deflate,gzip'
|
||||
sid='SomeSID'
|
||||
secure='true'
|
||||
charsets='ISO_8859-1 ISO-2022-JP'
|
||||
xmpp:restartlogic='true'
|
||||
xmpp:version='1.0'
|
||||
authid='ServerStreamID'
|
||||
xmlns='http://jabber.org/protocol/httpbind'
|
||||
xmlns:xmpp='urn:xmpp:xbosh'
|
||||
xmlns:stream='http://etherx.jabber.org/streams'>
|
||||
<stream:features>
|
||||
<pipelining xmlns='urn:xmpp:features:pipelining'/>
|
||||
<c xmlns='http://jabber.org/protocol/caps'
|
||||
hash='sha-1'
|
||||
node='http://prosody.im/'
|
||||
ver='ItBTI0XLDFvVxZ72NQElAzKS9sU='/>
|
||||
<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
<mechanism>SCRAM-SHA-1</mechanism>
|
||||
<mechanism>PLAIN</mechanism>
|
||||
</mechanisms>
|
||||
</stream:features>
|
||||
<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
cj1vTXNUQUF3QUFBQU1BQUFBTlAwVEFBQUFBQUJQVTBBQWUxMjQ2OTViLTY5Y
|
||||
TktNGRlNi05YzMwLWI1MWIzODA4YzU5ZSxzPU5qaGtZVE0wTURndE5HWTBaaT
|
||||
AwTmpkbUxUa3hNbVV0TkRsbU5UTm1ORE5rTURNeixpPTQwOTY=
|
||||
</challenge>
|
||||
</body>
|
||||
]]></example>
|
||||
<p>Without pipelining, this exchange would require 2 round trips; with pipelining, it requires only 1.</p>
|
||||
<p>If the SASL exchange involved a challenge, in its final SASL response the client includes an XMPP resource binding request (note that the BOSH &BODY; wrapper includes a restart='true' attribute, instead of sending this in a new empty &BODY; as shown in XEP-0206).</p>
|
||||
<example caption="SASL Response with Pipelined XMPP Resource Binding Request"><![CDATA[
|
||||
POST /webclient HTTP/1.1
|
||||
Host: httpcm.example.com
|
||||
Accept-Encoding: gzip, deflate
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 295
|
||||
|
||||
<body rid='1573741822'
|
||||
sid='SomeSID'
|
||||
xmpp:restart='true'
|
||||
xmlns='http://jabber.org/protocol/httpbind'
|
||||
xmlns:xmpp='urn:xmpp:xbosh'>
|
||||
<response xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
Yz1iaXdzLHI9b01zVEFBd0FBQUFNQUFBQU5QMFRBQUFBQUFCUFUwQUFlMTI0N
|
||||
jk1Yi02OWE5LTRkZTYtOWMzMC1iNTFiMzgwOGM1OWUscD1VQTU3dE0vU3ZwQV
|
||||
RCa0gyRlhzMFdEWHZKWXc9
|
||||
</response>
|
||||
<iq id='bind_1'
|
||||
type='set'
|
||||
xmlns='jabber:client'>
|
||||
<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
|
||||
<resource>httpclient</resource>
|
||||
</bind>
|
||||
</iq>
|
||||
</body>
|
||||
]]></example>
|
||||
<p>An XMPP stream restart is required by RFC 6120 at this point; however, the server can include the stream features element (if any) along with the SASL authentication success and XMPP resource binding success notifications, as shown in the following example.</p>
|
||||
<example caption="SASL Success with Pipelined Stream Features and XMPP Resource Binding Response"><![CDATA[
|
||||
HTTP/1.1 200 OK
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 149
|
||||
|
||||
<body xmlns='http://jabber.org/protocol/httpbind'>
|
||||
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
dj1wTk5ERlZFUXh1WHhDb1NFaVc4R0VaKzFSU289
|
||||
</success>
|
||||
<stream:features>
|
||||
<pipelining xmlns='urn:xmpp:features:pipelining'/>
|
||||
<c xmlns='http://jabber.org/protocol/caps'
|
||||
hash='sha-1'
|
||||
node='http://prosody.im/'
|
||||
ver='ItBTI0XLDFvVxZ72NQElAzKS9sU='/>
|
||||
<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'/>
|
||||
</stream:features>
|
||||
<iq id='bind_1'
|
||||
type='result'
|
||||
xmlns='jabber:client'>
|
||||
<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
|
||||
<jid>user@example.com/httpclient</jid>
|
||||
</bind>
|
||||
</iq>
|
||||
</body>
|
||||
]]></example>
|
||||
<p>Without pipelining, this second exchange would require 3 round trips; with pipelining, it requires only 1.</p>
|
||||
<p>Therefore, without pipelining the XMPP exchanges for stream establishment over BOSH require at least 5 round trips (if the SASL mechanism is not multi-stage, and perhaps more depending on the SASL mechanism used); with pipelining the minimum number of round trips is 1.</p>
|
||||
<p>Note: It might seem that with pipelining the minimum number of round trips is 2. However, consider the case of a session creation request that includes (a) a SASL authentication request for a SASL mechanism that is not multi-stage, such as PLAIN, (b) an XMPP resource binding request, and (c) a stream restart request; in the "happy path" the session creation response would include (a) stream features, (b) a SASL authentication success notification, and (c) an XMPP resource binding response. This flow is shown in the following example.</p>
|
||||
<example caption="BOSH Session Request with Pipelined SASL Authentication Request and XMPP Resource Binding Request, Including Stream Restart Request"><![CDATA[
|
||||
POST /webclient HTTP/1.1
|
||||
Host: httpcm.jabber.org
|
||||
Accept-Encoding: gzip, deflate
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 104
|
||||
|
||||
<body content='text/xml; charset=utf-8'
|
||||
from='user@example.com'
|
||||
hold='1'
|
||||
rid='1573741820'
|
||||
to='example.com'
|
||||
route='xmpp:example.com:9999'
|
||||
secure='true'
|
||||
wait='60'
|
||||
xml:lang='en'
|
||||
xmpp:restart='true'
|
||||
xmpp:version='1.0'
|
||||
xmlns='http://jabber.org/protocol/httpbind'
|
||||
xmlns:xmpp='urn:xmpp:xbosh'>
|
||||
<auth xmlns="urn:ietf:params:xml:ns:xmpp-sasl" mechanism="PLAIN">
|
||||
[plain credentials here]
|
||||
</auth>
|
||||
<iq id='bind_2' type='set' xmlns='jabber:client'>
|
||||
<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'/>
|
||||
</iq>
|
||||
</body>
|
||||
]]></example>
|
||||
<example caption="BOSH Session Response with Pipelined Stream Features, SASL Authentication Request, and XMPP Resource Binding Response"><![CDATA[
|
||||
HTTP/1.1 200 OK
|
||||
Content-Type: text/xml; charset=utf-8
|
||||
Content-Length: 674
|
||||
|
||||
<body wait='60'
|
||||
inactivity='30'
|
||||
polling='5'
|
||||
requests='2'
|
||||
hold='1'
|
||||
from='example.com'
|
||||
accept='deflate,gzip'
|
||||
sid='SomeSID'
|
||||
secure='true'
|
||||
charsets='ISO_8859-1 ISO-2022-JP'
|
||||
xmpp:restartlogic='true'
|
||||
xmpp:version='1.0'
|
||||
authid='ServerStreamID'
|
||||
xmlns='http://jabber.org/protocol/httpbind'
|
||||
xmlns:xmpp='urn:xmpp:xbosh'
|
||||
xmlns:stream='http://etherx.jabber.org/streams'>
|
||||
<stream:features>
|
||||
<pipelining xmlns='urn:xmpp:features:pipelining'/>
|
||||
<c xmlns='http://jabber.org/protocol/caps'
|
||||
hash='sha-1'
|
||||
node='http://prosody.im/'
|
||||
ver='ItBTI0XLDFvVxZ72NQElAzKS9sU='/>
|
||||
<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
|
||||
<mechanism>SCRAM-SHA-1</mechanism>
|
||||
<mechanism>PLAIN</mechanism>
|
||||
</mechanisms>
|
||||
</stream:features>
|
||||
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>
|
||||
<iq id='bind_2' type='result' xmlns='jabber:client'>
|
||||
<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
|
||||
<jid>user@example.com/F580F69C-6E1E-41CF-94A5-692D96D0EC51</jid>
|
||||
</bind>
|
||||
</iq>
|
||||
</body>
|
||||
]]></example>
|
||||
</section1>
|
||||
|
||||
<section1 topic='Reconnection' anchor='reconnection'>
|
||||
<p>The pain of multiple round trips is magnified if the initiating entity needs to reconnect frequently (e.g., because of intermittent network outages). Although &xep0124; can be used to mitigate the pain, BOSH is not appropriate for all scenarios and is not currently used in others (e.g., server-to-server streams).</p>
|
||||
<p>The pain of multiple round trips is magnified if the initiating entity needs to reconnect frequently (e.g., because of intermittent network outages). Although XEP-0124 can be used to mitigate the pain, BOSH is not appropriate for all scenarios and is not currently used in others (e.g., server-to-server streams).</p>
|
||||
<p>The minimize the speed of reconnection, implementations are strongly encouraged to support TLS Session Resumption (&rfc5077;) in addition to the technologies already mentioned.</p>
|
||||
<p>Reconnection can be further enhanced by using the stream resumption feature described in &xep0198;. <cite>XEP-0198</cite> does not legislate exactly when it is safe for the server to allow the client to send the <resume/> request. Clearly, sending it before the stream is encrypted would increase the possibility of replay attacks. However, sending it after TLS negotiation (Step 4 above) but before SASL authentication and resource binding (Steps 5 through 8) would enable the client to begin sending stanzas more quickly. It is a matter of server policy whether to advertise the SM feature after TLS negotiation or only after SASL negotiation.</p>
|
||||
</section1>
|
||||
<section1 topic='Security Considerations' anchor='security'>
|
||||
<p>To follow.</p>
|
||||
<p>Because pipelining does not skip any channel encryption or authentication steps, but merely packs them into a smaller number of TCP packets or HTTP request/response pairs, it is unlikely that the foregoing quickstart methods introduce security vulnerabilities. However, the server must be careful not to send stream features that it would not otherwise send before a security context is established.</p>
|
||||
</section1>
|
||||
<section1 topic='IANA Considerations' anchor='iana'>
|
||||
<p>This document requires no interaction with &IANA;.</p>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user