[jdev] service banners?
Jefferson Ogata
Jefferson.Ogata at noaa.gov
Wed Jul 19 10:22:20 CDT 2006
On 2006-07-19 12:32, Tobias Markmann wrote:
> You can put that kind of information, disclaimer, TOS, etc., in the
> registration form which your server returns to the client which is going
> to create a account. If that isn't supported the server can just provide
> Off-Band Registration where the user can read all that info before applying.
> http://www.jabber.org/jeps/jep-0077.html
> <http://www.jabber.org/jeps/jep-0077.html>
That is not sufficient. First of all, users need to be notified every
time they access the service, as a reminder, and because terms of
service may change over time. Second, users will never register, as they
will simply be authenticating against an existing authentication service.
> For users who already have an account most server admins just send a
> message to all users on changes on that topic.
Again, the requirement is that this occur before authentication.
Look at how FTP, ssh2, or rsync do it. Really, it is an oversight that
this is not currently built in to XMPP; it's trivial to define an
attribute or element at the beginning of the stream element to handle
this. It's a matter of specifying that and then having clients present
it to the user before logging in. The original question was simply
whether this was in the protocol definition anywhere, and I think Peter
answered quite clearly right off the top.
--
Jefferson Ogata <Jefferson.Ogata at noaa.gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt at noaa.gov>
"Never try to retrieve anything from a bear."--National Park Service
More information about the JDev
mailing list