diff --git a/xep-0357.xml b/xep-0357.xml index 2303f15e..8771a834 100644 --- a/xep-0357.xml +++ b/xep-0357.xml @@ -29,6 +29,12 @@ lancestout@gmail.com lance@lance.im + + 0.3 + 2017-07-07 + hw +

Use server JID as 'from' address for notifications.

+
0.2.1 2016-02-16 @@ -189,8 +195,8 @@

Each PubSub node is a delivery target for the Push Service, which could represent multiple devices for a single user.

-

In order to prevent information leaks, each node SHOULD be configured with a 'whitelist' access model so that only trusted entities are able to view or subscribe to published notifications. Furthermore, the 'publish-only' affiliation SHOULD be used to allow acceptable entities (such as the user's bare JID) to publish to the node to trigger notifications.

-

Care SHOULD be taken to ensure that publish requests are coming from the user's server and not from other third-party client applications using the full JID of a user. A Push Service MAY opt to only accept or further process publish requests from bare JIDs to ensure that only a user's server is able to publish, but it SHOULD instead use publish options with credentials shared only with the user's server (see Enabling Notifications).

+

In order to prevent information leaks, each node SHOULD be configured with a 'whitelist' access model so that only trusted entities are able to view or subscribe to published notifications. Furthermore, the 'publish-only' affiliation SHOULD be used to allow acceptable entities (such as the server JID and the user's bare JID) to publish to the node to trigger notifications.

+

Care SHOULD be taken to ensure that publish requests are coming from the user's server and not from other third-party client applications using the full JID of a user. A Push Service MAY opt to only accept or further process publish requests from server JIDs and bare user JIDs to ensure that only a user's server is able to publish, but it SHOULD instead use publish options with credentials shared only with the user's server (see Enabling Notifications).

@@ -324,7 +330,7 @@

Other elements MAY be included if relevant for the notification.

@@ -349,7 +355,7 @@