[JDEV] jabber:iq:search question

[amarjeetkaur at credenceanalytics.com]

<PRE> 
 Is there any implementation of a public service using this technique?

My client supports these sequential results however I could never test 

this in the real world.

This is an interesting protocol design choice, but it raises security 

concerns.  When all you have to rely on is the "id" attribute, how much 

chance is there that someone can spoof results?  Or even by accident, as 

most libraries don't generate random id's.


--

Sebastiaan




Peter Saint-Andre wrote:

> If you have implemented jabber:iq:search in your software AND you are

> using the feature that enabled you so receive multiple IQs for large 

> result sets, I would appreciate it if you could let me know. When I

> documented jabber:iq:search in JEP-0055, I left this out because I have

> not been able to find implementations. But if there are implementations, I

> may add it in.

> 

> Thanks.

> 

> Peter

> 

> --

> Peter Saint-Andre

> Jabber Software Foundation

> http://www.jabber.org/people/stpeter.php


_______________________________________________

jdev mailing list

jdev at jabber.org

http://mailman.jabber.org/listinfo/jdev


 </PRE>