0.13 RC1 added disclosure field

git-svn-id: file:///home/ksmith/gitmigration/svn/xmpp/trunk@187 4b5297f7-1745-476d-ba37-a9c6900126ab

xep-0155.xml

@@ -25,6 +25,12 @@
   <shortname>chatneg</shortname>
   &ianpaterson;
   &stpeter;
+  <revision>
+    <version>0.13</version>
+    <date>2006-11-16</date>
+    <initials>ip</initials>
+    <remark><p>Added disclosure field</p></remark>
+  </revision>
   <revision>
     <version>0.12</version>
     <date>2006-11-10</date>
@@ -116,9 +122,9 @@
 </section1>
 <section1 topic='Negotiating a New Chat Session' anchor='new'>
   <section2 topic='Initiating a Chat' anchor='new-initiate'>
-    <p>In order to initiate a negotiated chat session, the initiating party ("user") sends a &MESSAGE; <note>The &MESSAGE; stanza is used because the user does not necessarily know which of the contact's resources is most available (or indeed if the contact is online).</note> stanza to the receiving party ("contact") containing a &lt;feature/&gt; child qualified by the 'http://jabber.org/protocol/feature-neg' namespace. The &MESSAGE; stanza MUST NOT contain a &BODY; child element (as specified in &rfc3921;). The &MESSAGE; stanza type SHOULD be "normal" (either explicitly or by non-inclusion of the 'type' attribute). The stanza MUST contain a &THREAD; element for tracking purposes (where the newly-generated ThreadID is unique to the proposed session). The data form MUST contain a hidden FORM_TYPE field whose value is "http://jabber.org/protocol/chatneg" and MUST contain a boolean field named "accept". &BOOLEANNOTE; The inclusion of "otr" and "security" fields is also RECOMMENDED. Note: The options within any 'list-single' fields SHOULD appear in order of preference.</p>
+    <p>In order to initiate a negotiated chat session, the initiating party ("user") sends a &MESSAGE; <note>The &MESSAGE; stanza is used because the user does not necessarily know which of the contact's resources is most available (or indeed if the contact is online).</note> stanza to the receiving party ("contact") containing a &lt;feature/&gt; child qualified by the 'http://jabber.org/protocol/feature-neg' namespace. The &MESSAGE; stanza MUST NOT contain a &BODY; child element (as specified in &rfc3921;). The &MESSAGE; stanza type SHOULD be "normal" (either explicitly or by non-inclusion of the 'type' attribute). The stanza MUST contain a &THREAD; element for tracking purposes (where the newly-generated ThreadID is unique to the proposed session). The data form MUST contain a hidden FORM_TYPE field whose value is "http://jabber.org/protocol/chatneg" and MUST contain a boolean field named "accept". &BOOLEANNOTE; The inclusion of "otr", "disclosure" and "security" fields is also RECOMMENDED. Note: The options within any 'list-single' fields SHOULD appear in order of preference.</p>
     <p>Note: Chat sessions may be conducted between entities who are never online at the same time. However, if the user is interested only in an <em>immediate</em> chat session then the user SHOULD instruct the contact's server not to store the message for later delivery using the &xep0079; protocol.</p>
-    <p>In the following example of a negotiation request, Romeo requests a chat with Juliet and also queries her regarding whether she wants to enable all message logging (see &xep0136;) <note>A client MUST NOT set the 'otr' field to 'true' unless it has confirmed that its server will allow it to switch off Automated Archiving (see <cite>Message Archiving</cite>).</note> and support the &xep0071; and &xep0085; extensions during this chat session. He also requires that they are both connected securely to their servers, and asks which language she prefers amoungst those he can write. (Note: These fields are examples only; a full set of chat session negotiation parameters will be registered as described in the <link url='#registrar'>XMPP Registrar Considerations</link> section of this document.)</p>
+    <p>In the following example of a negotiation request, Romeo requests a chat with Juliet and also queries her regarding whether she wants to enable all message logging (see &xep0136;) <note>A client MUST NOT set the 'otr' field to 'true' unless it has confirmed that its server will allow it to switch off Automated Archiving (see <cite>Message Archiving</cite>).</note> and support the &xep0071; and &xep0085; extensions during this chat session. He asks Juliet's client if it is prepared to make a (legally binding) guarantee that it does not intentionally implement any feature (not even a disabled feature) that might disclose the content of the chat, any associated (decryption) keys or his identity to any third-party (see <cite>Encrypted Sessions</cite>). He also requires that they are both connected securely to their servers, and asks which language she prefers amoungst those he can write. (Note: These fields are examples only; a full set of chat session negotiation parameters will be registered as described in the <link url='#registrar'>XMPP Registrar Considerations</link> section of this document.)</p>
     <example caption="User requests chat session"><![CDATA[
 <message type='normal'
          from='romeo@montague.net/orchard'
@@ -144,6 +150,19 @@
         </option>
         <required/>
       </field>
+      <field label="Disclosure" type="list-single" var="disclosure">
+        <value>never</value>
+        <option label="Guarantee disclosure not implemented">
+          <value>never</value>
+        </option>
+        <option label="Disable all disclosures">
+          <value>disabled</value>
+        </option>
+        <option label="Allow disclosures">
+          <value>enabled</value>
+        </option>
+        <required/>
+      </field>
       <field label='XHTML Formatting?'
              type='list-single'
              var='http://jabber.org/protocol/xhtml-im'>
@@ -200,6 +219,7 @@
       </field>
       <field var='accept'><value>true</value></field>
       <field var='otr'><value>0</value></field>
+      <field var='disclosure'><value>never</value></field>
       <field var='http://jabber.org/protocol/xhtml-im'>
         <value>0</value>
       </field>
@@ -298,7 +318,7 @@
     ]]></example>
   </section2>
   <section2 topic='Completing or Canceling the Negotitation' anchor='new-complete'>
-    <p>If the contact accepted the chat (see <link url='#new-accept'>Accepting a Chat</link>) then the user MUST either complete or cancel the session negotitation. If the contact chose an option other than the default (prefered) value for one or more of the fields, then instead of having the client accept the session automatically the user may prefer to review the values that the contact selected before confirming that the session is open. <note>See <cite>Encrypted Sessions</cite> for examples of other instances where the user might find the values submitted by the contact unacceptable.</note> In any case the user's client SHOULD verify that the selected values are acceptable before completing the session negotitation - and confirming that the chat session is open - by replying with a form with the form 'type' attribute set to 'result'. The form MUST contain the FORM_TYPE field and the "accept" field set to "1" or "true". It MAY contain the other fields received from the contact. The user MAY include other content (e.g., a &BODY; element) in the confirmation stanza:</p>
+    <p>If the contact accepted the chat (see <link url='#new-accept'>Accepting a Chat</link>) then the user MUST either complete or cancel the session negotitation. If the contact chose an option other than the default (prefered) value for one or more of the fields, then instead of having the client accept the session automatically the user may prefer to review the values that the contact selected before confirming that the session is open. <note>See <cite>Encrypted Sessions</cite> for examples of other instances where the user might find the values submitted by the contact unacceptable.</note> In any case the user's client SHOULD verify that the selected values are acceptable before completing the session negotitation - and confirming that the chat session is open - by replying with a form with the form 'type' attribute set to 'result'. The form MUST contain the FORM_TYPE field and the "accept" field set to "1" or "true". The user MAY include other content (e.g., a &BODY; element) in the confirmation stanza:</p>
     <example caption="User completes negotitation and confirms session is open"><![CDATA[
 <message type='normal'
          from='romeo@montague.net/orchard'
@@ -310,15 +330,6 @@
         <value>http://jabber.org/protocol/chatneg</value>
       </field>
       <field var='accept'><value>true</value></field>
-      <field var='otr'><value>0</value></field>
-      <field var='http://jabber.org/protocol/xhtml-im'>
-        <value>0</value>
-      </field>
-      <field var='http://jabber.org/protocol/chatstates'>
-        <value>0</value>
-      </field>
-      <field var='security'><value>c2s</value></field>
-      <field var='language'><value>it</value></field>
     </x>
   </feature>
   <body>I forgot what I wanted to say!</body>
@@ -440,7 +451,7 @@
 </message>
     ]]></example>
     <p>Both parties MUST then consider the chat session to be ended.</p>
-    <p>The other party's client MAY explicitly acknowledge the termination of the chat by sending a &MESSAGE; containing a data form of type "result", and the value of the "terminate" field set to "1" or "true". The client MUST mirror the &THREAD; value it received.</p>
+    <p>The other party's client MAY explicitly acknowledge the termination of the chat by sending a &MESSAGE; containing a data form of type "result", and the value of the "terminate" field set to "1" or "true" (see <cite>Encrypted Sessions</cite> for a practical example). The client MUST mirror the &THREAD; value it received.</p>
     <example caption="Other party acknowledges chat termination"><![CDATA[
 <message type='normal'
          from='romeo@montague.net/orchard'
@@ -520,6 +531,22 @@
       var='continue'
       type='text-single'
       label='Another resource with which to continue the session'/>
+  <field
+      var="disclosure"
+      type="list-single"
+      label="Disclosure of content, decryption keys or identities">
+    <option label="Entities guarantee no disclosure features
+                   exist (not even disabled features)">
+      <value>never</value>
+    </option>
+    <option label="Entities MUST NOT disclose (except for those
+                   disclosures that are required by law)">
+      <value>disabled</value>
+    </option>
+    <option label="Entities MAY disclose">
+      <value>enabled</value>
+    </option>
+  </field>
   <field
       var='http://jabber.org/protocol/chatstates'
       type='list-single'