[jdev] E2E signing question

[Alex Milowski]

If I've interpreted this correctly, a signed stanza is wrapped in the same
stanza type with an e2e child
containing the S/MIME data.  A server should then route the stanza based on
the attributes of the wrapper.

Is the server expected to do any verification on the signed data?

The responsibility of checking seems to me to be totally that of the
receiving client.  They would then need to check and process the stanza part
of the multipart message assuming that it all checks out fine with the
signature.

Can you send multiple stanzas in the XMPP part or is that considered an
error?  It seems like it should be an error.

--Alex Milowski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20101014/acefdf0d/attachment.htm>