[OASIS Issue Tracker] (MQTT-340) If this value is not 5 ...

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ https://issues.oasis-open.org/browse/MQTT-340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=64798#comment-64798 ] 

Brian Raymor commented on MQTT-340:
-----------------------------------

I've never seen another protocol specification that included language such as:

807 If the Protocol Name is incorrect the Server MAY continue processing the CONNECT packet in
808 accordance with some other specification

821 If this value is not 5, the Server MAY continue processing the CONNECT packet in accordance with some
822 other specification

so I'd like to understand the rationale. In the second case, the protocol name is "MQTT" and perhaps is another version but the text is ambiguous about the scenario. I'd commented on this before (inline) in the editor's draft.

And vaguely it makes me wonder if this is a security hole. 

> If this value is not 5 ...
> --------------------------
>
>                 Key: MQTT-340
>                 URL: https://issues.oasis-open.org/browse/MQTT-340
>             Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
>          Issue Type: Bug
>          Components: edits
>    Affects Versions: 5, wd10
>            Reporter: Brian Raymor
>            Assignee: Ed Briggs
>            Priority: Minor
>             Fix For: 5, wd10
>
>
> The rationale for this normative language is absent:
> 821 If this value is not 5, the Server MAY continue processing the CONNECT packet in accordance with some
> 822 other specification,
> What is the intent?



--
This message was sent by Atlassian JIRA
(v6.2.2#6258)