[VYSPER-288] Announcing in-band registration although StartTLS might be required (first)

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 0.8
• Assignee: Niklas Therning
• Reporter: Bernd Fondermann
• Created: 28/Jun/11 16:29
• Updated: 04/Jul/11 21:04
• Resolved: 04/Jul/11 21:04

Description

Right now, in-band registration is announced before a mandatory switch to TLS has been accomplished.
I think we should not do that. However, I don't know if the feature still works over TLS. But I'd strongly suspect so, because, hey, it's a registration.

After crossreading XEP-0077, I don't see why we should allow for doing regs over an unencrypted wire.

WDYT?

(Marking as a blocker, because of potential security implications. However, in-band is not enabled by default, is it?)