From aa96595b05b399f8b3eca080781886b63ce54593 Mon Sep 17 00:00:00 2001 From: mvisode Date: Fri, 3 Mar 2017 14:31:39 +0000 Subject: [PATCH] Clarification Clarified to avoid reliance on insecure DNS queries for determination of hostname --- xep-0233.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xep-0233.xml b/xep-0233.xml index db955815..0e1943da 100644 --- a/xep-0233.xml +++ b/xep-0233.xml @@ -88,7 +88,7 @@

An XMPP client will initiate a connection to the XMPP server.

The XMPP server will communicate its hostname in a child element of the <mechanisms/> element during SASL negotation, as allowed by RFC 6120 (see Section 6.3.5 and the schema for the 'urn:ietf:params:xml:ns:xmpp-sasl' namespace in Appendix A.4).

This child element is <hostname/> qualified by the 'urn:xmpp:domain-based-name:1' namespace. &NSNOTE;.

-

The XML character data of the <hostname/> element specifies the fully-qualified name of the XMPP server. This should be used for constructing the Kerberos principal name and is independent of the usual rules that an XMPP client uses for establishing a network connection to the XMPP server.

+

The XML character data of the <hostname/> element specifies the fully-qualified name of the XMPP server. This should be used for constructing the Kerberos principal name and is independent of the usual rules that an XMPP client uses for establishing a network connection to the XMPP server which may use insecure DNS queries (also see &rfc4120;).