diff --git a/inbox/otrdisco.xml b/inbox/otrdisco.xml new file mode 100644 index 00000000..be091d1e --- /dev/null +++ b/inbox/otrdisco.xml @@ -0,0 +1,107 @@ + + +%ents; +]> + + +
+ OTR Discovery + + This document provides a mechanism by which OTR encryption support can be + discovered in XMPP, without relying on OTRs protocol agnostic discovery + mechanism. + + &LEGALNOTICE; + xxxx + ProtoXEP + Standards Track + Standards + Council + + XMPP Core + XEP-0030 + + + + NOT_YET_ASSIGNED + + Sam + Whited + sam@samwhited.com + sam@samwhited.com + + + 0.0.1 + 2015-08-29 + ssw +

Initial draft.

+
+
+ +

+ The Off-the-Record messaging protocol (OTR) is widely layered on top of + XMPP to provide end-to-end encryption. Current use of the protocol is + described in &xep0364;. OTR provides its own discovery mechanism in which + it sends messages with special whitespace characters to indicate support. + While this works when initializing a session, there is no way to query a + client for support and to know in advance that a particular version of + OTR is supported. This XEP provides a mechanism for discovering OTR + support at the XMPP level. This specification aims to solve that by + providing an in-band mechanism for discovering OTR support in XMPP. +

+

+ It should be noted that newer, more secure encryption protocols exist for + XMPP, and that new implementations of OTR are discouraged. This protocol + is primarily intended to solve issues with existing implementations of + OTR. +

+
+ +

+ If an entity supports OTR it MUST advertise the fact by returning a + feature of 'urn:xmpp:otr:0' &VNOTE; in response to a &xep0030; + information request. It MUST also include '<version>' elements for + each version of the OTR protocol that is supported. Eg. an entity which + supports OTR versions 2 and 3 might include the following feature in its + disco info list: + + + 2 + 3 + + ]]> +

+
+ +

+ Because OTR support is advertised outside of any end-to-end encrypted + stream, it may be subject to downgrade attacks (eg. the server operator + may remove one or more versions of OTR from the list). +

+
+ +

+ This document requires no interaction with the Internet Assigned Numbers + Authority (IANA). +

+
+ +

This specification defines the following XML namespaces:

+ +

+ The ®ISTRAR; shall include the foregoing namespaces in its disco + features registry as defined in &xep0030;. + + urn:xmpp:otr:0 + Indicates support for Off-the-Record Messaging (OTR) + XEP-xxxx + + ]]> +

+
+