[jdev] serious jabberd's 1.4.3 violation of XMPP-Core
Alexey Nezhdanov
snake at penza-gsm.ru
Sat Oct 16 13:15:01 CDT 2004
XMPP-Core:
4.3 Stream Security
An entity SHOULD NOT attempt to send XML StanzasXML Stanzas over the stream
before the stream has been authenticated, but if it does then the other
entity MUST NOT accept such stanzas and SHOULD return a <not-authorized/>
stream error and then terminate both the XML stream and the underlying TCP
connection
jabberd 1.4.3 (at least on my host) sends stanzas immidiatedly upon connect,
not waiting for dialback auth completion.
--
Respectfully
Alexey Nezhdanov
More information about the JDev
mailing list