[JDEV] jabber:iq:search question

Sebastiaan 'CBAS' Deckers cbas at screaming3d.com
Tue Dec 10 03:53:47 CST 2002


Client sends out one <iq/> with a unique id="abc123", but can receive 
multiple type="result" replies with that same="abc123" id (even if they 
have different from="xyz" attributes).
Isn't this what you meant?
The client is not sending out multiple <iq/>s with the same id to all 
the services, just one <iq/> to one service, but multiple results from 
multiple services to one client.

--
Sebastiaan


Peter Saint-Andre wrote:
> Hmm, does this technique rely on sending multiple IQ results with the same
> 'id' attribute? If so, that's in violation of the XMPP core doc, which
> specifies that the value of an ID must be unique within a stream (this is
> consistent with the XML spec).
> 
> Peter
> 
> --
> Peter Saint-Andre
> Jabber Software Foundation
> http://www.jabber.org/people/stpeter.php
> 
> On Sun, 8 Dec 2002, Sebastiaan 'CBAS' Deckers wrote:
> 
> 
>>Is there any implementation of a public service using this technique?
>>My client supports these sequential results however I could never test 
>>this in the real world.
>>This is an interesting protocol design choice, but it raises security 
>>concerns.  When all you have to rely on is the "id" attribute, how much 
>>chance is there that someone can spoof results?  Or even by accident, as 
>>most libraries don't generate random id's.
>>
>>--
>>Sebastiaan
>>
>>
>>Peter Saint-Andre wrote:
>>
>>>If you have implemented jabber:iq:search in your software AND you are
>>>using the feature that enabled you so receive multiple IQs for large 
>>>result sets, I would appreciate it if you could let me know. When I
>>>documented jabber:iq:search in JEP-0055, I left this out because I have
>>>not been able to find implementations. But if there are implementations, I
>>>may add it in.
>>>
>>>Thanks.
>>>
>>>Peter
>>>
>>>--
>>>Peter Saint-Andre
>>>Jabber Software Foundation
>>>http://www.jabber.org/people/stpeter.php
>>
>>_______________________________________________
>>jdev mailing list
>>jdev at jabber.org
>>http://mailman.jabber.org/listinfo/jdev
>>
> 
> 
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev
> 
> 




More information about the JDev mailing list