XSF Discussion - 2017-10-15

00:02:58 lskdjf has joined
00:04:32 lskdjf has left
00:04:45 Ge0rG has left
00:06:00 lovetox has left
00:06:09 lskdjf has left
00:06:24 pep. jonasw, I think it's *"Trainer\*Innen"* :P
00:06:41 lovetox has joined
00:06:44 pep. (Hopefully your client doesn't already convert what I just wrote)
00:07:36 alacer has joined
00:10:57 pep. This "I want to change XHTML-IM" fashion is going really quick and I don't like that
00:11:04 Syndace has joined
00:12:36 pep. I'm really curious as to what is going to come out of that new markdown-y spec. But I don't expect much
00:14:03 Valerian has left
00:14:16 Valerian has joined
00:18:46 Ge0rG has left
00:20:47 Zash pep.: People will run a random markdown js lib over stuff, and there'll be a high chance that they pick one that defaults to passing html trough and then we're back at square 1
00:21:05 pep. Certainly
00:21:11 pep. /popcorn
00:21:31 pep. And we would have lost a few weeks for nothing
00:21:47 pep. ~~Weeks of talking, months of incompatibilities, yeras of ranting~~ ✎
00:21:57 pep. ~~Weeks of talking, months of incompatibilities, years of ranting~~ ✎ ✏
00:22:16 pep. Weeks of talking, months of ranting, years of incompatibilities ✏
00:22:29 pep. Or are we ever really done ranting
00:28:42 lskdjf has joined
00:31:14 Valerian has left
00:32:45 Ge0rG has left
00:37:31 Tobias has joined
00:38:47 Zash pep.: When we die
00:41:02 Syndace has joined
00:41:43 lskdjf has joined
00:41:43 lskdjf has joined
00:44:17 Ge0rG has left
00:45:10 lovetox has left
00:51:57 Guus has left
00:53:09 la|r|ma has left
00:53:12 la|r|ma has joined
00:55:22 daniel has left
00:58:50 Guus has joined
00:59:17 Ge0rG has left
01:00:53 Guus has left
01:00:57 Guus has joined
01:08:23 Guus has left
01:08:25 Guus has joined
01:14:19 Ge0rG has left
01:14:29 Guus has left
01:16:35 lumi has left
01:17:29 alacer has joined
01:23:09 Guus has joined
01:23:28 Guus has left
01:23:30 Guus has joined
01:24:18 stefandxm has left
01:27:38 alacer has joined
01:34:26 Ge0rG has left
01:40:45 nyco has left
01:40:50 nyco has joined
01:41:45 Valerian has joined
01:45:19 Ge0rG has left
01:46:28 moparisthebest Just for Zash I'll write a bot with a dead mans switch to rant in here after I die
01:57:37 alacer has joined
02:00:18 Ge0rG has left
02:04:55 ralphm has left
02:10:48 daniel has left
02:13:03 daniel has joined
02:16:24 Guus has left
02:16:27 Guus has joined
02:17:00 daniel has left
02:18:34 alacer has joined
02:18:48 jere has left
02:19:08 daniel has joined
02:20:27 Ge0rG has left
02:30:18 Ge0rG has left
02:36:27 jere has joined
02:36:59 tux has joined
02:39:48 jjrh has left
02:40:17 jjrh has left
02:43:31 Syndace has left
02:43:34 Syndace has joined
02:45:05 stefandxm has joined
02:45:19 Ge0rG has left
02:48:38 jjrh has left
02:49:41 jjrh has left
03:01:17 stefandxm has left
03:02:08 Ge0rG has left
03:06:57 jabberatdemo has joined
03:09:33 SamWhited has left
03:13:03 jabberatdemo has left
03:17:08 Ge0rG has left
03:32:06 Ge0rG has left
03:32:52 daniel has left
03:43:46 uc has joined
03:44:55 daniel has left
03:50:52 Ge0rG has left
03:56:00 daniel has joined
03:57:37 Ge0rG has joined
03:57:43 uc has joined
04:06:50 alacer has joined
04:06:53 stefandxm has joined
04:07:59 Ge0rG has left
04:09:36 Ge0rG has left
04:13:01 Valerian has left
04:13:12 Valerian has joined
04:13:32 daniel has left
04:20:28 Guus has left
04:25:00 ThurahT has left
04:25:11 stefandxm has left
04:26:44 ThurahT has joined
04:29:44 Valerian has left
04:30:13 Ge0rG has left
04:32:04 daniel has joined
04:35:16 Valerian has joined
04:41:18 daniel has left
04:43:42 Ge0rG has left
04:47:24 Guus has joined
04:49:43 sonny has left
04:50:15 Guus has left
04:51:42 Guus has joined
04:53:51 Ge0rG has left
04:53:53 Ge0rG has left
05:00:23 Ge0rG has left
05:01:13 daniel has left
05:02:58 Valerian has left
05:05:36 waqas has left
05:11:18 zinid has left
05:11:19 zinid has joined
05:15:38 Guus has left
05:17:29 Guus has joined
05:17:30 jubalh has joined
05:17:57 jubalh has left
05:19:52 Ge0rG has left
05:19:59 uc has joined
05:26:13 alacer has left
05:27:37 alacer has joined
05:30:29 Ge0rG has left
05:43:41 Ge0rG has left
05:54:53 stefandxm has joined
05:55:59 valo has joined
05:56:25 jubalh has joined
06:03:11 Ge0rG has left
06:11:28 stefandxm has left
06:18:10 Ge0rG has left
06:19:21 jubalh has left
06:28:54 la|r|ma has left
06:28:59 la|r|ma has joined
06:33:09 Ge0rG has left
06:34:40 arc has joined
06:35:22 daniel has left
06:36:05 arc has left
06:36:06 arc has joined
06:41:00 Tobias has joined
06:44:31 arc has left
06:44:32 arc has joined
06:48:10 Ge0rG has left
07:04:12 Tobias has joined
07:04:27 alacer has joined
07:08:10 Ge0rG has left
07:11:01 Syndace has joined
07:11:05 Syndace has joined
07:16:47 tux has joined
07:20:27 SouL has left
07:27:26 Ge0rG has left
07:30:14 zinid has left
07:36:24 emxp has joined
07:40:10 emxp has left
07:40:14 emxp has joined
07:42:58 stefandxm has joined
07:46:01 lovetox has joined
07:48:40 lovetox has left
07:54:39 Ge0rG has left
08:01:32 stefandxm has left
08:07:16 arc has left
08:08:07 ralphm has left
08:08:22 arc has joined
08:08:53 Ge0rG has left
08:09:00 emxp has left
08:11:18 emxp has joined
08:12:56 uc has joined
08:14:04 ralphm has joined
08:14:44 arc has left
08:16:36 arc has joined
08:25:22 jubalh has joined
08:30:11 tim@boese-ban.de has left
08:32:37 Ge0rG has left
08:32:55 arc has left
08:35:22 tim@boese-ban.de has joined
08:39:40 remko has joined
08:47:37 Ge0rG has left
08:48:57 jubalh has left
08:59:10 alacer has joined
08:59:57 uc has joined
09:00:19 arc has joined
09:01:02 Syndace has joined
09:02:25 Ge0rG has left
09:04:28 Tobias has joined
09:05:20 Tobias has joined
09:06:35 remko has joined
09:06:39 arc has left
09:06:50 remko has joined
09:07:27 arc has joined
09:11:12 lskdjf has joined
09:12:57 Tobias has joined
09:20:15 Ge0rG has left
09:22:00 Tobias has joined
09:24:44 efrit has joined
09:25:16 arc has left
09:27:22 arc has joined
09:29:12 stefandxm has joined
09:33:16 arc has left
09:33:39 arc has joined
09:34:38 remko has joined
09:35:15 Ge0rG has left
09:39:21 arc has left
09:39:35 arc has joined
09:44:17 alacer has joined
09:47:22 arc has left
09:48:54 arc has joined
09:50:02 Ge0rG has left
09:51:04 Flow has joined
09:54:26 arc has left
09:55:14 arc has joined
09:57:38 dwd has left
09:59:48 Tobias has joined
10:00:41 arc has left
10:01:25 arc has joined
10:03:28 dwd has left
10:05:02 remko has joined
10:05:48 Ge0rG has left
10:05:51 Guus has left
10:07:49 alacer has joined
10:08:58 arc has left
10:10:13 arc has joined
10:12:26 Flow Zash: I'm not sure if that most "markup to HTML" converter libs would pass html trough, but I could be wrong. On the other hand: The whole stackexchange network, and things like discourse, are facing the same situation, and I've never heard that either of them was vulnerable to malicious HTML injection
10:14:03 Zash Flow: Pick the first markdown library you can find and try?
10:15:13 Flow Zash: Is that challenging me to do a evaluation of the situation or so that I see the very first lib I pick failing? ;)
10:15:14 Zash Since the original implementation does html passthough, I suspect it to be highly likely that it be the default.
10:15:50 Flow Ok, but then what do all the sites displaying HTML generated from CommonMark do?
10:15:56 Zash Even pandoc, the glorious saviour of all markup, defaults to html right through
10:15:58 arc has left
10:16:22 Flow Is it probably more a matter of unsafe defaults?
10:16:51 arc has joined
10:17:02 efrit has left
10:17:57 Zash Defaults matter.
10:19:05 alacer has joined
10:19:45 Flow Course
10:20:41 Flow https://github.com/commonmark/cmark#security
10:21:06 remko has joined
10:21:10 Flow by default we will do the unsafe thing because convenience
10:21:25 pep. Yay
10:23:26 arc has left
10:23:27 arc has joined
10:25:34 Zash If we could just invent some sufficiently complicated to get wrong XML format...
10:27:48 alacer has joined
10:28:17 Ge0rG has left
10:29:13 arc has left
10:31:11 arc has joined
10:31:58 jubalh has joined
10:33:51 Flow dwd: does xep388 <failure/> have a way to tell the client to try it with a different SASL mech again? Or do we even have that in the standard SASL profile? asking because of ISR
10:37:10 dwd Flow, ISR has - hopefully - nothing to do with that. Either you're authenticated or not, and if you're authenticated ISR will either succeed or not.
10:38:10 goffi has joined
10:39:52 nyco has left
10:40:51 nyco has joined
10:42:30 Flow dwd: whut? the idea has always been that ISR is used to authenticate the resumption
10:42:33 arc has left
10:42:50 arc has joined
10:43:09 dwd Flow, But also, no. I'm not sure what would trigger that. The user exists but authentication failed? That case is normally treated equally to the user not existing for security reasons.
10:43:16 Ge0rG has left
10:44:02 Flow dwd: caused by the service, for some reason, "forgetting" the isr token, e.g. because of a restart
10:44:31 Flow i.e. a fallback to "full" SASL auth, instead of lightweight ISR auth
10:44:35 dwd Flow, So you're advocating a user enumeration attack? :-)
10:44:51 dwd ISR is not, and must not be, authentication. We went through this I don't know how many times.
10:44:52 Zash Does the token contain the username?
10:45:47 Flow dwd: It's authenticating the stream resumption, I don't know how many times we went through this
10:46:26 Flow Zash, no
10:48:23 arc has left
10:48:39 dwd Flow, ISR is just '198 resumption but as a '388 extension, right? The authentication happens within a normal SASL mechanism. You've proposed HT-* for this purpose, but one could use anything.
10:49:06 arc has joined
10:49:20 dwd Flow, So ISR+SCRAM is valid (just more round-trips). But also ISR+EXTERNAL, which is entirely reasonable.
10:50:03 Flow sure, but ISR alone is also an option
10:50:44 dwd No, it isn't. I'm very sure we had this argument before. If you make ISR an authentication mechanism in its own right it should not be conducted within the XSF.
10:50:46 Flow also, I don't see how one could do ISR + another SASL mech, after xep388 moved away from multi SASL mechs to 'tasks'
10:51:13 dwd Well, because ISR isn't a SASL mech to begin with.
10:51:33 Flow but SASL-HT is
10:51:52 Flow and ISR is based on it
10:52:04 dwd Sure. But HT-* is *just* a SASL mechanism that you *could* use with ISR, surely?
10:52:13 Flow so it's SASL-HT+SCRAM what you are suggesting
10:52:18 Flow dwd: no
10:52:26 dwd Well, then, the design is wrong.
10:52:40 Flow I don't think so, but please elaborate
10:53:01 Syndace has left
10:55:45 dwd Flow, If you can't use resume a session when authenticating using, say, EXTERNAL, the design is clearly wrong.
10:55:56 arc has left
10:57:11 dwd Since EXTERNAL is relying on (for example) a TLS certificate or session resumption, and HT-* is weaker, then by *allowing* HT-* you're weakening security.
10:57:12 Flow well that was possible until you switched xep388 from chained SASL mechs to tasks
10:57:25 dwd No, that's rubbish.
10:58:11 Flow I'd say tha just HT-* is sufficently secure for some deployments, but if you want to use HT-* with a strong mech, then it should be possible to do this
10:58:11 Ge0rG has left
10:58:25 arc has joined
10:58:54 dwd That does not make sense. HT-* *is* a SASL mechanism.
10:59:20 dwd So why would you need to use it *with* anything else?
10:59:43 Flow The initial idea of our SASL2 was to make it possible to chain multiple SASL mechs
10:59:59 dwd No it wasn't. I know this because the initial idea was mine.
11:00:38 Flow maybe your idea was different, but the first versions of SASL2 did make it possible to chain SASL mechs
11:01:00 dwd The idea was to have an extensible SASL profile that could have secondary authentication includedm like 2FA. I thought (wrongly) these oculd be modelled as SASL mechanisms.
11:02:38 Flow and I still think they should be
11:02:53 Flow but that's mostly unrelaeted to this discussion I think
11:03:02 dwd Well, I tried it, and they can't.
11:03:15 Flow well maybe a sample of one is not enough
11:03:51 arc has left
11:04:33 jubalh has joined
11:04:52 arc has joined
11:04:54 Flow but back to the topic: ISR is now based on SASL HT-*, and if xep388 doesn't allow chained SASL mechs (maybe additional to tasks), then it's ISR with HT-*, or standard SM resumption without SASL HT-*
11:05:31 dwd Well, that's rather my point - no it isn't. There's no reason why ISR needs to be tied to HT-*.
11:06:27 Flow the only other mechanism suitable is probably EXTERNAL
11:06:50 Flow I don't see the point in ISR + SCRAM
11:07:21 Flow becasue then you could do simply standard SM resumption and SCRAM
11:07:38 dwd Sure. But ISR+SCRAM will be substantially fewer round-trips.
11:07:54 dwd Just one more, actually, than ISR+HT-*.
11:08:39 Flow and I doubt if ISR+HT-* is substantially weaker then ISR+EXTERNAL
11:08:54 Flow or any other mech
11:09:10 dwd Flow, You're deluded if you think that's the case.
11:09:40 Flow If the lifetime of the hashed token is limited?
11:10:10 dwd HT-* is, at its core, just a hash of a plaintext token held on the server in the clear. That immediately means an attacker can obtain that token and use it, potentially.
11:10:16 arc has left
11:10:43 arc has joined
11:11:12 dwd That's not a bad thing, because we can mitigate that with limited lifetime etc. But to think it offers the same level of security as a client certificate is really not right at all.
11:11:14 Flow I think everything is off as soon as an attacker is able to obtain things from the service
11:11:26 Zash dwd: an attacker with access to server internals?
11:11:59 Flow of course, you could argue that an attacker possibly has only access to some server internals and so
11:12:10 dwd Zash, an attacker with access to the database, probably. Typical breach. And yes, you could handwave over keeping the tokens out of persistent storage etc.
11:12:36 Flow I hope that no one stores the HT-* in a database, should be small enough to hold it in memory
11:12:47 jonasw clustering?
11:12:50 Flow and probably something I should write into the I-D
11:12:55 jonasw somebody will do that
11:13:16 Flow jonasw, clustering doesn't automatically mean that you have to store the token in a db
11:13:36 Ge0rG has left
11:13:48 Flow but of course, somebody will do something unreasonable
11:13:48 jonasw sure, but it may be the convenient choice
11:14:10 Flow damn you, convenience
11:14:26 dwd Flow, But anyway, the point is that if ISR works with *any* SASL mechanism in principle, then if HT-* is a problem we just use something else.
11:14:57 Flow dwd, sorry didn't get the last part
11:16:21 Flow If i'm not mistaken nothing in the current ISR ProtoXEP currently limits the mech to HT-*
11:16:42 dwd Well, we need to fix that then.
11:16:51 tux has joined
11:16:53 Flow but of course, it's written with HT-* in mind
11:17:42 Flow dwd, fix what?
11:18:09 Flow I'm currently more worried how much more complex the SASL2-ISR combination is, compared to my initial ISR ProtoXEP…
11:18:30 jonasw how many round-trips does ISR save if you use any other SASL mechanism?
11:18:35 Flow Altough I believe in Holger to implement any complex beast in ejabberd :)
11:18:41 jonasw i.e. what’s the difference to just resuming in that case?
11:20:12 Flow jonasw, IIRC 1 round-trip
11:20:18 Flow but I haven't counted recently
11:21:18 Kev has left
11:21:45 stefandxm has left
11:22:45 arc has left
11:22:46 arc has joined
11:23:45 Syndace has left
11:27:18 remko has joined
11:28:19 arc has left
11:30:26 arc has joined
11:30:37 Ge0rG has left
11:34:28 uc has joined
11:35:56 arc has left
11:36:45 arc has joined
11:37:01 mimi89999 has joined
11:37:54 alacer has joined
11:39:05 Guus has joined
11:41:54 jubalh has left
11:42:06 Guus has left
11:42:06 arc has left
11:43:11 Guus has joined
11:43:14 arc has joined
11:43:40 Ge0rG has left
11:43:52 Guus has left
11:45:00 Guus has joined
11:46:17 Guus has left
11:46:33 Guus has joined
11:48:15 Flow dwd, I think we talked past each other, for most of the time. Which made us didn't talk about what should happen if HT-* failes because of an experied token (my initial question). In that sense, it is probably different than most SASL mechs, in the sense that you could fallback to another SASL mech
11:49:37 arc has left
11:50:31 Tobias has joined
11:50:31 arc has joined
11:52:47 alacer has joined
11:54:48 tux has joined
11:54:52 lumi has joined
11:56:41 stefandxm has joined
11:57:04 remko has joined
11:57:51 alacer has joined
12:00:37 Ge0rG has left
12:05:59 Flow prably the simplest approach would be "client knows that he just did a HT-* auth that failed, so let's retry (possible on a new connection) e.g. SCRAM"
12:09:24 jere has left
12:09:29 jere has joined
12:13:10 Syndace has left
12:13:54 Kev FWIW, I think dwd's right about just about everything above.
12:17:56 Ge0rG has left
12:23:09 Flow sure, was mostly a misunderstanding what ISR+SASL-MECH means. He was talking about using ISR with SASL-MECH, and I was talking about using ISR with SASL HT-* and SASL-MECH chained
12:24:09 remko has joined
12:27:50 alacer has joined
12:28:36 Ge0rG has left
12:31:23 arc has left
12:31:23 arc has joined
12:37:04 arc has left
12:37:49 alacer has left
12:38:11 arc has joined
12:41:01 Syndace has joined
12:41:06 Syndace has joined
12:45:42 arc has left
12:47:49 alacer has joined
12:53:03 arc has joined
13:01:00 Syndace has joined
13:01:00 waqas has joined
13:01:08 Syndace has joined
13:03:21 ralphm has left
13:09:34 tux has joined
13:11:18 efrit has joined
13:13:57 lovetox has joined
13:17:07 Ge0rG has left
13:17:56 uc has joined
13:18:12 remko has joined
13:24:02 arc has left
13:24:03 arc has joined
13:34:24 remko has joined
13:37:27 la|r|ma has joined
13:40:03 alacer has left
13:54:18 Guus has left
14:08:37 tux has joined
14:10:09 Kev has left
14:10:09 Kev has left
14:13:11 la|r|ma has left
14:13:19 la|r|ma has joined
14:15:27 intosi has joined
14:19:10 mimi89999 has left
14:23:48 lskdjf has left
14:24:27 lskdjf has left
14:29:29 goffi has left
14:30:53 goffi has joined
14:34:08 dwd has left
14:34:57 dwd has left
14:36:47 alacer has joined
14:40:30 ralphm has joined
14:41:12 Guus has left
14:43:44 Guus has joined
14:44:22 Guus has left
14:44:28 Guus has joined
14:45:38 Guus has left
14:45:41 Guus has joined
14:46:07 Guus has left
14:46:10 Guus has joined
14:47:07 Guus has left
14:47:18 Guus has joined
14:54:08 Guus has left
15:00:40 ralphm has left
15:09:03 remko has joined
15:15:16 Valerian has joined
15:17:17 Guus has joined
15:25:16 Guus has left
15:26:42 remko has joined
15:27:44 alacer has joined
15:28:19 SamWhited has left
15:32:33 alacer has joined
15:36:11 daniel has left
15:37:26 Guus has joined
15:45:31 Tobias has joined
15:47:01 Guus has left
15:48:45 jere has left
15:48:59 jere has joined
15:49:27 Guus has joined
15:55:24 arc has left
15:55:53 arc has joined
15:56:47 Guus has left
15:56:50 Guus has joined
15:56:55 Tobias has joined
15:57:57 arc has left
15:57:57 arc has joined
15:58:06 uc has left
15:59:59 valo has joined
16:03:09 remko has joined
16:03:56 Tobias has joined
16:05:24 daniel has left
16:05:27 daniel has joined
16:06:21 Tobias has joined
16:06:52 daniel has left
16:07:04 daniel has joined
16:09:46 Valerian has left
16:09:49 daniel has left
16:10:03 daniel has joined
16:13:32 lskdjf has left
16:14:05 lskdjf has left
16:14:30 alacer has joined
16:16:59 efrit has left
16:17:51 lskdjf has left
16:20:07 stefandxm has left
16:20:34 remko has joined
16:20:53 efrit has joined
16:21:20 lskdjf has left
16:22:14 daniel has left
16:22:20 lskdjf has left
16:31:18 jubalh has joined
16:35:22 efrit has left
16:35:44 Valerian has joined
16:38:27 efrit has joined
16:39:36 mimi89999 has joined
16:41:14 alacer has joined
16:41:35 alacer has left
16:41:39 alacer has joined
16:44:30 efrit has left
16:45:55 arc has left
16:45:56 arc has joined
16:48:17 intosi has joined
16:48:19 arc has left
16:52:14 arc has joined
16:52:43 alacer has left
16:53:42 Kev has left
16:57:15 remko has joined
16:57:38 stefandxm has joined
16:58:11 lskdjf has joined
16:58:43 efrit has joined
16:59:29 intosi has left
17:01:04 lskdjf has left
17:01:13 ralphm has joined
17:01:49 intosi has joined
17:07:13 lskdjf has left
17:07:51 Guus has left
17:11:21 jubalh has left
17:11:33 lskdjf has left
17:12:34 arc has left
17:12:35 arc has joined
17:13:24 SamWhited has left
17:14:54 remko has joined
17:14:55 arc has left
17:18:53 arc has joined
17:21:06 lskdjf has joined
17:22:05 arc has left
17:22:06 arc has joined
17:24:20 daniel has joined
17:27:12 lskdjf has left
17:27:13 arc has left
17:27:35 Guus has joined
17:27:43 lskdjf has left
17:29:41 sezuan has joined
17:29:48 arc has joined
17:29:51 daniel has left
17:33:19 Guus has left
17:33:25 Guus has joined
17:35:36 Guus has left
17:37:09 Guus has joined
17:39:24 daniel has joined
17:41:16 Syndace has joined
17:43:43 Guus has left
17:43:43 lskdjf has joined
17:45:21 jubalh has joined
17:51:20 remko has joined
17:53:05 daniel has left
17:53:41 lskdjf has left
17:54:00 Guus has joined
17:54:22 sezuan has left
17:58:53 lskdjf has left
17:59:15 Guus has left
18:00:12 Guus has joined
18:01:31 sezuan has joined
18:02:45 lovetox has left
18:02:54 lovetox has joined
18:03:35 Valerian has left
18:07:12 Valerian has joined
18:08:18 jubalh has left
18:09:25 daniel has joined
18:10:21 Guus has left
18:12:02 Guus has joined
18:17:05 lskdjf has joined
18:17:46 Guus has left
18:18:01 waqas has left
18:19:46 Guus has joined
18:22:28 Guus has left
18:23:09 jubalh has joined
18:24:19 alacer has joined
18:24:40 Guus has joined
18:25:29 Guus has left
18:26:51 valo has joined
18:39:55 remko has joined
18:41:40 intosi has joined
18:46:59 dwd has left
18:47:04 jubalh has left
18:54:22 Guus has joined
18:55:41 alacer has joined
18:57:26 arc has left
18:57:27 dwd has left
18:57:27 arc has joined
18:59:05 Guus has left
19:00:47 daniel has left
19:00:49 arc has left
19:00:53 daniel has joined
19:02:57 arc has joined
19:04:31 Tobias has joined
19:05:39 Guus has joined
19:06:03 arc has left
19:06:04 arc has joined
19:11:38 arc has left
19:11:40 arc has joined
19:11:44 Guus has left
19:15:38 remko has joined
19:17:17 jubalh has joined
19:19:48 dwd has left
19:20:24 dwd has left
19:25:03 dwd has left
19:26:29 dwd has left
19:27:06 mimi89999 has left
19:27:52 dwd has left
19:28:23 dwd has left
19:28:24 intosi has joined
19:29:55 dwd has left
19:30:27 dwd has left
19:31:33 efrit has left
19:31:46 remko has joined
19:36:26 efrit has joined
19:39:23 jubalh has left
19:41:28 sonny has joined
19:48:17 Flow has left
19:58:24 arc has left
19:58:25 arc has joined
19:58:45 pep. hmm, I was wondering about Consistent Color Generation. I remember we were talking about XHTML-IM styles/colors the other day, I suppose it's the same issue here? edhelas
19:58:53 pep. (i.e., doesn't fit in the color theme)
19:59:10 intosi has left
19:59:39 Guus has joined
20:04:02 intosi has joined
20:08:30 mark.erd has joined
20:09:39 remko has joined
20:10:26 mark.erd has left
20:10:43 mark.erd has joined
20:10:43 goffi has left
20:10:54 arc has left
20:10:54 arc has joined
20:10:57 Guus has left
20:13:03 mark.erd has left
20:13:19 mark.erd has joined
20:15:42 arc has left
20:15:43 arc has joined
20:19:12 intosi has left
20:19:13 mark.erd has left
20:19:13 arc has left
20:19:43 lumi has left
20:21:23 Guus has joined
20:21:24 jjrh has left
20:22:48 arc has joined
20:23:01 Guus has left
20:23:25 Guus has joined
20:25:51 arc has left
20:25:52 arc has joined
20:26:11 remko has joined
20:27:20 Guus has left
20:27:24 Guus has joined
20:33:49 arc has left
20:33:50 arc has joined
20:35:25 ralphm has left
20:35:35 intosi has joined
20:37:48 tux has joined
20:44:53 Syndace has left
20:45:51 Tobias has joined
20:48:36 emxp has joined
20:50:34 jjrh has left
20:51:37 edhelas is there a place where I can find a proper way to detect if a JID is valid or not ?
20:51:53 Guus has left
20:53:40 Guus has joined
20:53:50 mathieui the RFC? :p
20:54:29 pep. https://tools.ietf.org/html/rfc7564
20:54:37 dwd has left
20:54:42 pep. I don't know of tools doing that
20:54:46 edhelas sure, but is there some nice PRECIS/regex thing that I can reuse ?
20:55:02 pep. I don't think it's a one regex job :x
20:55:35 pep. ~~But I've never ever read it. Maybe implementations have examples~~ ✎
20:55:41 pep. ~~But I've neven ever read it. Maybe implementations have examples~~ ✎ ✏
20:55:47 edhelas https://github.com/movim/movim/issues/492 got that, don't know how to fix it
20:55:53 pep. But I've never even read it. Maybe implementations have examples ✏
20:56:19 Valerian has left
20:56:27 pep. I think I linked a lib doing PRECIS in php the other day
20:57:00 pep. https://github.com/tom--/precis I don't know how compliant that is though
20:57:39 dwd has left
21:00:08 dwd has left
21:02:29 tim@boese-ban.de has joined
21:02:35 dwd has left
21:04:06 dwd has left
21:06:10 sezuan has left
21:06:27 dwd has left
21:08:03 Kev has left
21:09:27 dwd has left
21:11:16 Valerian has joined
21:12:09 uc has joined
21:12:27 dwd has left
21:13:47 edhelas has left
21:14:00 edhelas has joined
21:15:27 dwd has left
21:20:26 dwd has left
21:29:15 intosi has left
21:30:27 dwd has left
21:30:54 debacle has joined
21:31:52 efrit has left
21:32:45 intosi has joined
21:33:01 intosi has left
21:33:22 efrit has joined
21:40:00 jubalh has joined
21:40:13 mimi89999 has joined
21:41:08 intosi has joined
21:41:55 Guus has left
21:42:05 intosi has left
21:46:03 Guus has joined
21:46:51 Guus has left
21:46:57 Guus has joined
21:48:10 jere has left
21:49:17 zinid has left
21:49:50 arc has left
21:50:10 arc has joined
21:50:54 daniel has left
21:51:06 daniel has joined
21:57:03 Guus has left
21:57:11 Guus has joined
21:57:39 jubalh has left
21:58:54 Guus has left
22:00:41 jubalh has joined
22:00:47 lovetox has left
22:01:07 Guus has joined
22:03:19 intosi has joined
22:04:52 remko has joined
22:05:36 sonny has left
22:05:38 sonny has joined
22:07:54 intosi has left
22:07:55 Guus has left
22:10:56 Guus has joined
22:11:04 Valerian has left
22:11:12 Valerian has joined
22:11:18 Steve Kille has left
22:11:59 Guus has left
22:13:59 Steve Kille has left
22:15:25 Guus has joined
22:15:27 dwd has left
22:22:14 remko has joined
22:22:22 Guus has left
22:22:26 Guus has joined
22:28:01 Valerian has left
22:30:55 dwd has left
22:31:14 tux has left
22:31:15 tux has joined
22:32:19 Valerian has joined
22:33:21 arc has left
22:33:21 arc has joined
22:34:44 arc has left
22:34:45 arc has joined
22:35:02 dwd has left
22:37:20 dwd has left
22:37:22 arc has left
22:39:18 daniel has left
22:39:23 daniel has joined
22:41:18 arc has joined
22:41:35 dwd has left
22:42:27 dwd has left
22:45:27 dwd has left
22:48:32 lskdjf edhelas, why would a client need to validate jids (perfectly)? the client would only need to forward everything to the server and let the validation be done there. There is the point that it might be convinient to show a user that what they are doing definitly won't work, but that check mainly should not have false negatives - false positives aren't so bad because the server will detect them. so in practice .+@.+ should work fine...
22:51:27 dwd has left
22:55:29 dwd has left
22:55:50 dwd has left
22:56:56 dwd has left
22:57:42 dwd has left
22:58:49 remko has joined
23:01:21 dwd has left
23:05:02 arc has left
23:05:03 arc has joined
23:05:04 dwd has left
23:06:20 Syndace has joined
23:06:27 dwd has left
23:11:56 dwd has left
23:15:27 dwd has left
23:16:44 Guus has left
23:16:50 Guus has joined
23:17:58 SamWhited edhelas: I've got a validator you can use somewhere if you still need one. I'll seems it your way when I'm next at my desk.
23:18:22 dwd has left
23:18:27 dwd has left
23:21:00 efrit has left
23:24:26 Guus has left
23:27:27 dwd has left
23:30:25 jere has joined
23:36:09 Guus has joined
23:38:30 daniel has left
23:40:32 la|r|ma has joined
23:42:17 Guus has left
23:43:49 Guus has joined
23:46:12 vanitasvitae has joined
23:46:28 efrit has joined
23:50:52 debacle has left
23:52:26 efrit has left
23:53:05 remko has joined
23:57:26 dwd has left