Advance to draft as approved by the XMPP Council.
- XMPP Core defines SRV records only where 'service' is 'xmpp-client' and 'xmpp-server'. This document specifies to additionally look up records where 'service' is 'xmpps-client' and 'xmpps-server'. This document specifies that the following additional rules apply:
+&xmppcore; defines SRV records only where 'service' is 'xmpp-client' and 'xmpp-server'. This document specifies to additionally look up records where 'service' is 'xmpps-client' and 'xmpps-server'. This document specifies that the following additional rules apply:
Direct TLS provides AT LEAST the same level of security as STARTTLS, and more privacy without ALPN as using STARTTLS leaks that the underlying protocol is XMPP, while any direct TLS stream should be indistinguishable from any other direct TLS stream. Direct TLS provides more security than STARTTLS if &rfc7590; is not followed, as it isn't subject to STARTTLS stripping. All security setup and certificate validation code SHOULD be shared between the STARTTLS and direct TLS logic as well. All SRV-based connection methods are subject to DNS modification/stripping/spoofing of SRV records in the absence of DNSSEC.
ALPN (RFC 7301) requires registration of new Protocol IDs. This document specifies two Protocol IDs:
+ALPN (&rfc7301;) requires registration of new Protocol IDs. This document specifies two Protocol IDs:
Protocol: XMPP jabber:client namespace
Identification Sequence:
0x78 0x6d 0x70 0x70 0x2d 0x63 0x6c 0x69 0x65 0x6e 0x74 ("xmpp-client")
-Reference: [XEP-0368]
+Reference: [&xep0368;]
Protocol: XMPP jabber:server namespace
Identification Sequence:
0x78 0x6d 0x70 0x70 0x2d 0x73 0x65 0x72 0x76 0x65 0x72 ("xmpp-server")
-Reference: [XEP-0368]
+Reference: [&xep0368;]
The ALPN registry is currently located here.
@@ -129,6 +135,6 @@ Reference: [XEP-0368There are no XMPP Registrar Considerations.
+This document requires no interaction with the ®ISTRAR;.