[jdev] Scope of current RFC3920 SASL implementation

Richard Smith richard at indigo3.net
Sun Jan 25 11:29:24 CST 2009


Dirk Meyer wrote:
> Thinking of web services connected over XMPP, this sounds useful. Maybe
> we can define some sort of SASL in IQ stanzas. But this will be an
> insecure connection. Maybe you want to use E2E security in this use
> case.

E2E secures the transport... SASL in IQ stanzas would authenticate the 
user... This is my thinking at least...

-- 
Rich



More information about the JDev mailing list