[jdev] SASL question on RFC 3920

Jens Mikkelsen gyldenskjold at mail.dk
Thu Jan 6 06:26:01 CST 2005


Hi List,

I don't know much about SASL, so I have a question on this.

In RFC 3920 it says: 
 When negotiating XML streams in XMPP 1.0, TLS SHOULD be used as
   defined under Use of TLS (Section 5) and SASL MUST be used as defined
   under Use of SASL (Section 6). 

When i sniff the data when I am authenticating everything is clear text.
Dosn't SASL encrypt this or have I misunderstood something? Or is the
encryption being handled on an other network layer? 
If there is encryption is only during authentication or is it in
general?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://www.jabber.org/jdev/attachments/20050106/b11e48cd/attachment-0002.pgp>


More information about the JDev mailing list