mirror of
https://github.com/moparisthebest/xeps
synced 2024-12-21 23:28:51 -05:00
namespaces + XEP-0060 note
git-svn-id: file:///home/ksmith/gitmigration/svn/xmpp/trunk@642 4b5297f7-1745-476d-ba37-a9c6900126ab
This commit is contained in:
Peter Saint-Andre
parent
844a7dd381
commit
ac0d186acc
48
xep-0189.xml
48
xep-0189.xml
@ -21,11 +21,11 @@
|
||||
</dependencies>
|
||||
<supersedes>None</supersedes>
|
||||
<supersededby>None</supersededby>
|
||||
<shortname>pubkeys</shortname>
|
||||
<shortname>NOT YET ASSIGNED</shortname>
|
||||
&ianpaterson;
|
||||
<revision>
|
||||
<version>0.5</version>
|
||||
<date>2007-03-02</date>
|
||||
<date>2007-03-05</date>
|
||||
<initials>ip</initials>
|
||||
<remark><p>Merged node creation and first publish examples; recommended the value of each <KeyName/> element and id attribute is set to the key fingerprint; added fprint element and more examples</p></remark>
|
||||
</revision>
|
||||
@ -65,13 +65,13 @@
|
||||
|
||||
<section1 topic='Public Key Publication via PEP' anchor='usecases-pub'>
|
||||
<p>An entity SHOULD use &xep0163; to publish all its long-term public keys via its own server.</p>
|
||||
<p>If the pubkeys PEP node does not exist already then the entity MUST create it. In this case, the entity SHOULD specify that items published to the node are persistent and that the keys will only be pushed to subscribers whenever new keys are published (i.e. not when subscribers become newly available or when a new subscription is created). If the user wants to control access to his/her identity (see <link url='#security'>Security Considerations</link>) then the entity MUST also specify an appropriate access model other than "Open". The entity MAY create the node by including a <configure/> element when publishing a key for the first time.</p>
|
||||
<p>If the pubkeys PEP node does not exist already then the entity MUST create it. In this case, the entity SHOULD specify that items published to the node are persistent and that the keys will only be pushed to subscribers whenever new keys are published (i.e. not when subscribers become newly available or when a new subscription is created). If the user wants to control access to his/her identity (see <link url='#security'>Security Considerations</link>) then the entity MUST also specify an appropriate access model other than "Open". The entity MAY create the node by including a <configure/> element when publishing a key for the first time (note: this functionality is not yet supported by &xep0060;).</p>
|
||||
<p>The entity can update the keys that the node contains at any time. The value of the 'id' attribute of each <item/> element SHOULD be set to the fingerprint of the public key. i.e., the SHA256 hash (see &nistfips180-2;) of the key's normalized <KeyValue/>, <PGPData/> or <X509Data/> element (all character data <em>between</em> all elements MUST be removed and the XML MUST be converted to canonical form - see &w3canon;). Thus subscribers are able to request a single key by specifying its fingerprint (for example, when a subscriber is using the &xep0116; protocol).</p>
|
||||
<p>Each public key MUST be wrapped in a <KeyInfo/> element as specified in &w3xmlsig;. Each <KeyInfo/> element published using PEP MUST contain a <KeyName/> element with a unique (for the user) name to allow the key to be referenced by other XMPP Extension Protocols (for example, &xep0136;). The name MAY be the same as the value of the 'id' attribute. However, if two <KeyInfo/> elements contain the same public key in different formats (for example, an X.509 certificate may contain an RSA key), then the name of the two keys SHOULD be the same.</p>
|
||||
<example caption='Entity Creates Public Keys Publishing Node and Publishes an RSA Key to its Server'><![CDATA[
|
||||
<iq from='juliet@capulet.com/balcony' type='set' id='pub1'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<publish node='urn:xmpp:pubkeys'>
|
||||
<publish node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietRSAkey1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietRSAkey1hash</KeyName>
|
||||
@ -109,7 +109,7 @@
|
||||
<example caption='Entity Publishes a DSA Key to its Server'><![CDATA[
|
||||
<iq from='juliet@capulet.com/balcony' type='set' id='pub2'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<publish node='urn:xmpp:pubkeys'>
|
||||
<publish node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietDSAkey1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietDSAkey1hash</KeyName>
|
||||
@ -130,7 +130,7 @@
|
||||
<example caption='Entity Publishes an X.509 Certificate to its Server'><![CDATA[
|
||||
<iq from='juliet@capulet.com/balcony' type='set' id='pub3'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<publish node='urn:xmpp:pubkeys'>
|
||||
<publish node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietX509cert1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietX509cert1hash</KeyName>
|
||||
@ -154,7 +154,7 @@
|
||||
<example caption='Entity Publishes a PGP Key to its Server'><![CDATA[
|
||||
<iq from='juliet@capulet.com/balcony' type='set' id='pub4'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<publish node='urn:xmpp:pubkeys'>
|
||||
<publish node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietPGPkey1hash'>
|
||||
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
|
||||
<KeyName>julietPGPkey1hash</KeyName>
|
||||
@ -171,7 +171,7 @@
|
||||
<example caption='Subscriber Receives Event with Key'><![CDATA[
|
||||
<message to='romeo@montague.net/garden' from='juliet@capulet.com' type='headline'>
|
||||
<event xmlns='http://jabber.org/protocol/pubsub#event'>
|
||||
<items node='urn:xmpp:pubkeys'>
|
||||
<items node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietRSAkey1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietRSAkey1hash</KeyName>
|
||||
@ -200,7 +200,7 @@
|
||||
from='romeo@montague.net/garden'
|
||||
id='items1'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<items node='urn:xmpp:pubkeys'/>
|
||||
<items node='http://www.xmpp.org/extensions/xep-0189.html#ns'/>
|
||||
</pubsub>
|
||||
</iq>
|
||||
]]></example>
|
||||
@ -210,7 +210,7 @@
|
||||
from='juliet@capulet.com'
|
||||
id='items1'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<items node='urn:xmpp:pubkeys'>
|
||||
<items node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietRSAkey1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietRSAkey1hash</KeyName>
|
||||
@ -245,7 +245,7 @@
|
||||
from='romeo@montague.net/garden'
|
||||
id='items2'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<items node='urn:xmpp:pubkeys'>
|
||||
<items node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietRSAkey1hash'/>
|
||||
</items>
|
||||
</pubsub>
|
||||
@ -257,7 +257,7 @@
|
||||
from='juliet@capulet.com'
|
||||
id='items2'>
|
||||
<pubsub xmlns='http://jabber.org/protocol/pubsub'>
|
||||
<items node='urn:xmpp:pubkeys'>
|
||||
<items node='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<item id='julietRSAkey1hash'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyName>julietRSAkey1hash</KeyName>
|
||||
@ -282,7 +282,7 @@
|
||||
id='keys1'
|
||||
to='juliet@capulet.com/balcony'
|
||||
from='romeo@montague.net/garden'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys'/>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'/>
|
||||
</iq>
|
||||
]]></example>
|
||||
<p>The other entity MUST make a careful access control decision before returning only those public keys for which it holds the corresponding private key (not necessarily the full list of keys being published via <cite>Personal Eventing via Pubsub</cite>):</p>
|
||||
@ -291,7 +291,7 @@
|
||||
id='keys1'
|
||||
to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys'>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
...
|
||||
</KeyInfo>
|
||||
@ -313,7 +313,7 @@
|
||||
id='keys1'
|
||||
to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys'/>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'/>
|
||||
<error code='503' type='cancel'>
|
||||
<service-unavailable xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/>
|
||||
</error>
|
||||
@ -325,7 +325,7 @@
|
||||
id='keys2'
|
||||
to='juliet@capulet.com/balcony'
|
||||
from='romeo@montague.net/garden'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys'>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<fprint>julietRSAkey1hash</fprint>
|
||||
<fprint>julietRSAkey2hash</fprint>
|
||||
</pubkeys>
|
||||
@ -336,7 +336,7 @@
|
||||
id='keys2'
|
||||
to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys'>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
...
|
||||
</KeyInfo>
|
||||
@ -355,7 +355,7 @@
|
||||
id='keys3'
|
||||
to='juliet@capulet.com/balcony'
|
||||
from='romeo@montague.net/garden'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys' jid='benvolio@capulet.com'/>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns' jid='benvolio@capulet.com'/>
|
||||
</iq>
|
||||
]]></example>
|
||||
<example caption='Third-party responds with public keys'><![CDATA[
|
||||
@ -363,7 +363,7 @@
|
||||
id='keys3'
|
||||
to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys' jid='benvolio@capulet.com'>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns' jid='benvolio@capulet.com'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
...
|
||||
</KeyInfo>
|
||||
@ -378,7 +378,7 @@
|
||||
id='keys3'
|
||||
to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys' jid='benvolio@capulet.com'/>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns' jid='benvolio@capulet.com'/>
|
||||
<error code='404' type='cancel'>
|
||||
<item-not-found xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/>
|
||||
</error>
|
||||
@ -391,7 +391,7 @@
|
||||
<example caption='Sending public keys'><![CDATA[
|
||||
<message to='romeo@montague.net/garden'
|
||||
from='juliet@capulet.com/balcony'>
|
||||
<pubkeys xmlns='urn:xmpp:pubkeys' jid='benvolio@capulet.com'>
|
||||
<pubkeys xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns' jid='benvolio@capulet.com'>
|
||||
<KeyInfo xmlns='http://www.w3.org/2000/09/xmldsig#'>
|
||||
<KeyValue>
|
||||
<RSAKeyValue>
|
||||
@ -423,7 +423,7 @@
|
||||
</section1>
|
||||
|
||||
<section1 topic='XMPP Registrar Considerations' anchor='registrar'>
|
||||
<p>The ®ISTRAR; shall add 'urn:xmpp:pubkeys' to its registry of protocol namespaces.</p>
|
||||
<p>Until this specification advances to a status of Draft, its associated namespace shall be "http://www.xmpp.org/extensions/xep-0189.html#ns"; upon advancement of this specification, the XMPP Registrar shall issue a permanent namespace in accordance with the process defined in Section 4 of &xep0053;.</p>
|
||||
</section1>
|
||||
|
||||
<section1 topic='XML Schema' anchor='schema'>
|
||||
@ -432,8 +432,8 @@
|
||||
|
||||
<xs:schema
|
||||
xmlns:xs='http://www.w3.org/2001/XMLSchema'
|
||||
targetNamespace='urn:xmpp:pubkeys'
|
||||
xmlns='urn:xmpp:pubkeys'
|
||||
targetNamespace='http://www.xmpp.org/extensions/xep-0189.html#ns'
|
||||
xmlns='http://www.xmpp.org/extensions/xep-0189.html#ns'
|
||||
elementFormDefault='qualified'>
|
||||
|
||||
<xs:element name='pubkeys'>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user