[JDEV] open source webclient on port 80 + moderated chat

admin at jabber.fsinf.de admin at jabber.fsinf.de
Sat Apr 27 07:51:01 CDT 2002


On Fri, 26 Apr 2002, Michael F Lin wrote:

> I would encourage everyone considering using JEP-0025 to review the
> security discussion I carried out with the JEP authors
[...]
> http://mailman.jabber.org/pipermail/council/2002-April/000245.html

I think you are right, hijacking of HTTP polling Jabber sessions is very
easy with this protocol. Adding a hash as proposed by you should solve
this issue.

Regards




More information about the JDev mailing list