moparisthebest/xeps
1
0
Fork 0
mirror of https://github.com/moparisthebest/xeps synced 2024-11-21 16:55:07 -05:00
Code Issues Releases Wiki Activity

ProtoXEP IoT Discovery: Removed any hard-coded account names.

Browse Source
This commit is contained in:
Matthew A. Miller 2014-04-07 13:34:55 -06:00
parent fe1055579a
commit 85380e95b2
1 changed files with 20 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
inbox/iot-discovery.xml
View File

@ -1,4 +1,8 @@
<?xml version='1.0' encoding='UTF-8'?>
<!-- TODO: Sub-namespace for Registration Clients.
urn:xmpp:iot:discovery:regunit - Registration Units (can claim ownership)
-->
<!-- TODO: TBD items -->
<!DOCTYPE xep SYSTEM 'xep.dtd' [
<!ENTITY % ents SYSTEM 'xep.ent'>
%ents;
@ -42,10 +46,18 @@
<jid>TBD</jid>
<uri>http://www-rnks.informatik.tu-cottbus.de/~rklauck</uri>
</author>
<revision>
<version>0.0.2</version>
<date>2014-04-07</date>
<initials>pw</initials>
<remark>
<p>Removed any hard-coded account names.</p>
</remark>
</revision>
<revision>
<version>0.0.1</version>
<date>2014-03-11</date>
<initials>pw</initials>
<initials>pw,rk</initials>
<remark>
<p>First draft.</p>
</remark>
@ -543,9 +555,6 @@
XMPP Server itself. This can be found out by sending a discovery request to the server,
as described in <link url='#support'>Determining Support</link>.
</li>
<li>
The account 'discovery' on the same domain. (For example: discovery@jabber.org)
</li>
<li>
Search for accounts on the XMPP server with nick-name "discovery". Search is performed using &xep0055;
</li>
@ -969,9 +978,6 @@
The Owner itself can be a Provisioning Server. This can be found out by sending a discovery request to the Thing Registry,
as described in <link url='#support'>Determining Support</link>.
</li>
<li>
The account 'provisioning' on the same domain. (For example: provisioning@jabber.org)
</li>
<li>
Search for accounts on the XMPP server with nick-name "provisioning". Search is performed using &xep0055;
</li>
@ -1219,7 +1225,7 @@
<numRange name='V' min='1' minIncluded='true' max='2' maxIncluded='false'/>
<numRange name='LON' min='-72' minIncluded='true' max='-70' maxIncluded='true'/>
<numRange name='LAT' min='-34' minIncluded='true' max='-33' maxIncluded='true'/>
</update>
</search>
</iq>]]>
</example>
<p>
@ -1610,9 +1616,9 @@
<section2 topic='Hijacking predefined JIDs'>
<p>
If using predefined user names when searching for a Thing Registry or Provisioning Server, care must be taken to which XMPP Server things connect.
It might be possible for third parties to register these predefined account names (for example discovery@jabber.org or provisioning@jabber.org), and
pretend to be a Thing Registry or Provisioning Server and in this way hijack unsuspecting Things. If installing things using this method of finding
a Thing Registry or Provisioning Server, these accounts must be registered beforehand, to make sure the things cannot be hijacked.
It might be possible for third parties to register these predefined account names, and pretend to be a Thing Registry or Provisioning Server and in this way hijack
unsuspecting Things. If installing things using this method of finding a Thing Registry or Provisioning Server, these accounts must be registered beforehand, to make
sure the things cannot be hijacked.
</p>
</section2>
<section2 topic='Hijacking nicknames'>
@ -1888,8 +1894,8 @@
</section1>
<section1 topic='Acknowledgements' anchor='ack'>
<p>
Thanks to Henrik Svedlund, Joachim Lindborg, Joakim Eriksson, Joakim Ramberg, Johannes Hund, Karin Forsell, Lars Åkerskog, Olof Zandrén, Steffen Larsen Teemu Väisänen and
Yusuke Doi for all valuable feedback.
Thanks to Henrik Svedlund, Ivan Vučica, Joachim Lindborg, Joakim Eriksson, Joakim Ramberg, Johannes Hund, Karin Forsell, Kevin Smith, Lars Åkerskog, Olof Zandrén,
Philipp Hancke, Steffen Larsen, Teemu Väisänen and Yusuke Doi for all valuable feedback.
</p>
</section1>
</xep>