Abstract: | This specification defines an XMPP protocol extension that enables a client to exercise control over the XML stanzas it will receive from the server by instructing the server to intercept and filter inbound stanzas. |
Authors: | Joe Hildebrand, Jack Moffitt, Peter Saint-Andre |
Copyright: | © 1999 - 2010 XMPP Standards Foundation. SEE LEGAL NOTICES. |
Status: | Experimental |
Type: | Standards Track |
Version: | 0.2 |
Last Updated: | 2010-02-16 |
WARNING: This Standards-Track document is Experimental. Publication as an XMPP Extension Protocol does not imply approval of this proposal by the XMPP Standards Foundation. Implementation of the protocol described herein is encouraged in exploratory implementations, but production systems are advised to carefully consider whether it is appropriate to deploy implementations of this protocol before it advances to a status of Draft.
1. Introduction
2. Requirements
3. Protocol
3.1. Features
3.1.1. Stanza Kinds
3.1.2. Sender
3.1.3. Recipient
3.1.4. Payload
3.1.5. Advanced Matching
3.2. Discovering Supported Features
3.3. Enabling SIFT
4. Business Rules
4.1. Handling Presence Stanzas
4.2. Handling Message Stanzas
4.3. Handling IQ Stanzas
4.4. Lack of Sifting
5. Use Cases
5.1. Invisibility
5.2. Negative Presence Priority
5.3. Presence Hush
6. Security Considerations
7. IANA Considerations
8. XMPP Registrar Considerations
8.1. Protocol Namespaces
8.2. Protocol Versioning
9. XML Schema
10. Acknowledgements
Appendices
A: Document Information
B: Author Information
C: Legal Notices
D: Relation to XMPP
E: Discussion Venue
F: Requirements Conformance
G: Notes
H: Revision History
In some scenarios a client might want to control the XML stanzas it will receive over its stream with the server. Some potential use cases include:
The following taxonomy of client types is not exhaustive but might assist developers in understanding the scenarios in which SIFT might be useful.
Type | Sends Presence | Receives Presence | Receives Messages |
---|---|---|---|
Normal User | Yes | Yes | Yes |
Invisible User | No | Yes | Yes |
Large-Scale Bot | Yes | No | Yes |
Presentity | Yes | Yes | No |
Presence Watcher | No | Yes | No |
Presence Publisher | Yes | No | No |
Message Subscriber | No | No | Yes |
Message Publisher | No | No | No |
Note: Although RFC 3921 [2] specifies the use of a negative presence priority to block inbound message delivery, it does not enable the client to block inbound presence notifications, filter inbound IQ stanzas, or otherwise exercise fine-grained control over the delivery of inbound stanzas. While it would be possible to define particular values of negative presence priorities for some delivery control methods (e.g., <priority>-2<priority> could be hardcoded to mean "don't send me messages or presence"), that would be an ugly hack and thus inconsistent with XMPP Design Guidelines [3]. Therefore, this specification defines a stanza interception and filtering technology (a.k.a. "SIFT") that is more consistent with the underlying design of XMPP.
The SIFT protocol is designed to meet the following requirements.
The SIFT protocol is used to intercept or filter inbound stanzas only, not outbound stanzas sent by the client to the server or other entities. By "intercept" is meant that the server will not deliver any such stanza kind (message, presence, or IQ) to the client, and by "filter" is meant that the server will apply a rule to determine if the specific stanza will be delivered to the client (e.g., matching against a payload namespace); in general we refer to these actions as "sifting". The SIFT protocol enables the server to support only basic interception (even here to support interception only for particular kinds of stanzas), basic filtering as defined by the rules described in this specification, or advanced filtering using extensions to SIFT defined in other specifications. Each of the features supported by the server can be discovered by the client for maximum interoperability. The features, the process for discovering them, and the process for enabling them are described in the following sections.
SIFT supports the features defined below. Each feature is identified by a separate value for 'var' attribute qualified by the 'http://jabber.org/protocol/disco#info' namespace as specified in Service Discovery [4].
A server MAY support any combination of sifting IQ, message, or presence stanzas, as advertised by the following service discovery features.
A server MAY enable the client to sift based on sender. The following features are supported.
These values are child elements of the <iq-sift/>, <message-sift/>, and <presence-sift/> elements when the server returns a features discovery result, whereas they are values of the 'sender' attribute when the client enables sift support.
A server MAY enable the client to filter based on recipient. The following features are supported.
These values are child elements of the <iq-sift/>, <message-sift/>, and <presence-sift/> elements when the server returns a features discovery result, whereas they are values of the 'recipient' attribute when the client enables sift support.
A server MAY enable the client to sift based on the XML namespace and element name of the payload(s) that the client allows for delivery. If so, the server shall advertise a feature of urn:xmpp:sift:payloads:qname.
A server could match based on more complex criteria, e.g. Regular Expressions or XPath Expressions; such functionality is implicitly allowed because the XML schema specifies the <xs:any/> notation, but any such advanced matching shall be defined in separate specifications.
A client can discover if its server supports SIFT by sending a disco#info request.
<iq type='get' from='romeo@montague.lit/pda' to='montague.lit' id='bf4vb167'> <query xmlns='http://jabber.org/protocol/disco#info'/> </iq>
If a server supports the SIFT protocol, it MUST advertise that fact in its responses to "disco#info" requests by returning a feature of "urn:xmpp:sift:1" (see Namespace Versioning regarding the possibility of incrementing the version number). The server MUST also specify which features it supports.
In the following reply, the server indicates that it supports a minimal subset of SIFT features merely for the sake of presence blocking.
<iq type='result' from='montague.lit' to='romeo@montague.lit/pda' id='bf4vb167'> <query xmlns='http://jabber.org/protocol/disco#info'> <feature var='urn:xmpp:sift:1'/> <feature var='urn:xmpp:sift:stanzas:presence'/> </query> </iq>
In the following reply, the server indicates that it supports a wider range of SIFT features.
<iq type='result' from='montague.lit' to='romeo@montague.lit/pda' id='bf4vb167'> <query xmlns='http://jabber.org/protocol/disco#info'> <feature var='urn:xmpp:sift:1'/> <feature var='urn:xmpp:sift:recipients:all'/> <feature var='urn:xmpp:sift:senders:all'/> <feature var='urn:xmpp:sift:senders:others'/> <feature var='urn:xmpp:sift:stanzas:iq'/> <feature var='urn:xmpp:sift:stanzas:message'/> <feature var='urn:xmpp:sift:stanzas:presence'/> </query> </iq>
To enable clients to cache information about supported features, a server SHOULD return Entity Capabilities [5] data via stream features as described in XEP-0115.
To enable sifting of stanzas, the client sends an IQ-set to the server containing a <sift/> child element that in turn contains an <iq/> element, a <message/> element, a <presence/> element, or some combination of those elements. Each of these elements MAY include a 'recipient' attribute whose value is "all", "bare", or "full" (defaulting to "all"). Each of these elements MAY also include a 'sender' attribute whose value is "all", "local", "others", "remote", or "self" (defaulting to "all").
Note: The last SIFT request sent from the client to the server overrides all previous SIFT requests; SIFT requests are not cumulative. Therefore, each SIFT request needs to contain all the SIFT rules that the client wishes the server to enforce, not a delta from the previous request.
<iq from='romeo@montague.lit/pda' id='rv491g37' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <message sender='others'/> <presence/> </sift> </iq>
The foregoing IQ-set means "sift messages from others and presence from all senders, no matter if the recipient is my bare JID or my full JID".
Each of the child elements <iq/>, <message/>, and <presence/> MAY also contain one or more <allow/> children whose 'name' attribute specifies the element name and whose 'ns' attribute specifies the XML namespace of stanza payloads the client would like to allow. If no <allow/> elements are included, then sifting of that kind of stanza is completed without reference to the payload.
<iq from='romeo@montague.lit/pda' id='bs01jg75' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <iq> <allow name='jingle' ns='urn:xmpp:jingle:1'/> <allow name='query' ns='http://jabber.org/protocol/disco#info'/> </iq> <message/> </sift> </iq>
The foregoing IQ-set means "filter out inbound IQ stanzas except if the payload matches <jingle xmlns='urn:xmpp:jingle:1'/> or <query xmlns='http://jabber.org/protocol/disco#info'/>".
In XMPP, an IQ stanza can contain only one payload element, so the filtering logic is straightforward. However, a message or presence stanza can contain multiple payload elements (cf. Message Stanza Profiles [6]). Therefore, filtering for message and presence stanzas means that if the stanza contains the defined payload or payloads (perhaps in addition to other payloads), the server shall deliver it to the client.
For instance, the following example shows how a client would filter inbound messages and IQs to only receive SOAP payloads as specified in SOAP over XMPP [7].
<iq from='romeo@montague.lit/pda' id='cid143n9' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <iq> <allow name='Envelope' ns='http://www.w3.org/2003/05/soap-envelope'/> </iq> <message> <allow name='Envelope' ns='http://www.w3.org/2003/05/soap-envelope'/> </message> </sift> </iq>
Similarly, the following example shows how a client would filter inbound presence notifications to only receive notifications that contain entity capabilities data as specified in Entity Capabilities [8].
<iq from='romeo@montague.lit/pda' id='zl2f36d8' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <presence> <allow name='c' ns='http://jabber.org/protocol/caps'/> </presence> </sift> </iq>
Naturally, the server could return the typical XMPP error conditions, such as <service-unavailable/> if the server does not support the SIFT protocol or the version specified by the client, <feature-not-implemented/> if the server does not support a particular feature (e.g., <iq/> sifting) requested by the client, <bad-request/> if the request is malformed, <internal-server-error/> if the server experiences a malfunction while attempting to process the request, and so on.
When the client indicates that it wishes to receive inbound presence notifications, the server SHOULD send outbound presence probes on the client's behalf. Responses to these presence probes are addressed to the bare JID of the account and then broadcasted to all of the resources that have expressed interest in receiving inbound presence notifications.
If the client subsequently indicates that it wants the server to intercept inbound presence notifications, the server MUST NOT deliver to the client presence notifications that are addressed to the bare JID or full JID as defined by the 'recipient' attribute.
If the client then indicates again that it wishes to receive inbound presence notifications, the server shall resynchronize the client regarding the presence states of its contacts (how it does so is implementation-specific, e.g. whether it queues received presence notifications or re-probes the user's contacts).
When a client indicates that it wishes to receive messages, the server SHOULD deliver to the client all messages in the offline message queue and MUST deliver to the client any subsequent messages that would normally be delivered to the client in accordance with the rules defined in XMPP Core [9] and XMPP IM [10].
If the client subsequently indicates that it wants the server to intercept inbound messages (and there are no other connected or available resources that have expressed interest in receiving inbound messages), the server SHOULD treat messages as if there were no connected or available resources (e.g., storing them offline for later delivery); if the client then indicates again that it wishes to receive inbound messages, the server SHOULD send those queued messages to the client so that it can get back in sync regarding messages received from its contacts.
If the client does not request filtering of inbound IQ stanzas, the server MUST pass through to the client all IQ stanzas that are addressed to the full JID of the client (subject to appropriate security controls as defined in the relevant RFCs and XEPs).
If the client requests filtering of inbound IQ stanzas, for unfiltered payload name+namespace combinations the server MUST pass through to the client all IQ stanzas that are addressed to the full JID of the client (subject to appropriate security controls as defined in the relevant RFCs and XEPs), whereas for filtered payload name+namespace combinations the server MUST respond to all IQ stanzas in a way consistent with the specification for the given payload namespace (if defined) or as specified in XMPP Core [11] and XMPP IM [12] for IQs where no full JID <localpart@domain.tld/resource> matches; typically that means returning a <service-unavailable/> error.
Naturally, if the server advertises support for the SIFT protocol but the client does not send any IQ-set stanzas containing SIFT payloads, the server MUST proceed as it normally would in accordance with the core XMPP specifications.
In order to be invisible at the start of a session, a client can register for (i.e., not request interception of) inbound messages and presence notifications without sending initial presence.
<iq from='romeo@montague.lit/pda' id='mxi371g9' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'/> </iq>
The server would then probe the user's contacts and return the resulting presence notifications to the client, as well as allow inbound message and IQ stanzas.
If the user wants to "go visible", the client will send initial presence.
<presence/>
The user can later go invisible again by sending presence of type "unavailable" without modifying the SIFT rules or closing the stream.
<presence type='unavailable'/>
RFC 3921 defines the concept of negative values for the presence <priority/> element, where a negative value instructs the server to not deliver to the client any messages that are directed to the bare JID of the user. This behavior can be emulated using SIFT by asking the server to intercept inbound message stanzas for the bare JID, but not presence notifications or IQ stanzas.
<iq from='romeo@montague.lit/pda' id='zkd71d37' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <message recipient='bare'/> </sift> </iq>
If a client requests message sifting, but sends presence, it SHOULD specify a negative priority as a hint to contacts.
Because inbound presence notifications can be "chatty", mobile clients and other entities with limited battery life might want to "hush" the presence session by asking the server to intercept inbound presence notifications but not message stanzas.
<iq from='romeo@montague.lit/pda' id='uh2s64g9' to='romeo@montague.lit' type='set'> <sift xmlns='urn:xmpp:sift:1'> <presence/> </sift> </iq>
To follow.
This document requires no interaction with the Internet Assigned Numbers Authority (IANA) [13].
This specification defines the following XML namespace:
Upon advancement of this specification from a status of Experimental to a status of Draft, the XMPP Registrar [14] shall add the foregoing namespace to the registry located at <http://xmpp.org/registrar/namespaces.html>, as described in Section 4 of XMPP Registrar Function [15].
If the protocol defined in this specification undergoes a revision that is not fully backwards-compatible with an older version, the XMPP Registrar shall increment the protocol version number found at the end of the XML namespaces defined herein, as described in Section 4 of XEP-0053.
<?xml version='1.0' encoding='UTF-8'?> <xs:schema xmlns:xs='http://www.w3.org/2001/XMLSchema' targetNamespace='urn:xmpp:sift:1' xmlns='urn:xmpp:sift:1' elementFormDefault='qualified'> <xs:element name='sift'> <xs:complexType> <xs:sequence> <xs:element name='iq' type='siftElementType' minOccurs='0' maxOccurs='1'/> <xs:element name='message' type='siftElementType' minOccurs='0' maxOccurs='1'/> <xs:element name='presence' type='siftElementType' minOccurs='0' maxOccurs='1'/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name='siftElementType'> <xs:complexType> <xs:sequence> <xs:element name='allow' type='allowElementType' minOccurs='0' maxOccurs='unbounded'/> <xs:any namespace='##other' minOccurs='0' maxOccurs='unbounded'/> </xs:sequence> <xs:attribute name='recipient' use='optional' default='all'> <xs:simpleType> <xs:restriction base='xs:NCName'> <xs:enumeration value='all'/> <xs:enumeration value='bare'/> <xs:enumeration value='full'/> </xs:restriction> </xs:simpleType> </xs:attribute> <xs:attribute name='sender' use='optional' default='all'> <xs:simpleType> <xs:restriction base='xs:NCName'> <xs:enumeration value='all'/> <xs:enumeration value='local'/> <xs:enumeration value='others'/> <xs:enumeration value='remote'/> <xs:enumeration value='self'/> </xs:restriction> </xs:simpleType> </xs:attribute> </xs:complexType> </xs:element> <xs:simpleType name='empty'> <xs:restriction base='xs:string'> <xs:enumeration value=''/> </xs:restriction> </xs:simpleType> </xs:schema>
The authors wish to acknowledge feedback received from Dave Cridland, Jack Erwin, Fabio Forno, Waqas Hussein, Craig Kaes, Dirk Meyer, Christopher Orr, Robert Quattlebaum, Mike Taylor, Matthew Wild, and Jiří Zárevúcký, as well as from participants at XMPP Summit #7 in July 2009 and XMPP Summit #8 in February 2010.
Series: XEP
Number: 0273
Publisher: XMPP Standards Foundation
Status:
Experimental
Type:
Standards Track
Version: 0.2
Last Updated: 2010-02-16
Approving Body: XMPP Council
Dependencies: XMPP Core
Supersedes: None
Superseded By: None
Short Name: sift
Source Control:
HTML
RSS
This document in other formats:
XML
PDF
Email:
jhildebr@cisco.com
JabberID:
hildjj@jabber.org
Email:
jack@chesspark.com
JabberID:
jack@chesspark.com
Email:
stpeter@jabber.org
JabberID:
stpeter@jabber.org
URI:
https://stpeter.im/
The Extensible Messaging and Presence Protocol (XMPP) is defined in the XMPP Core (RFC 3920) and XMPP IM (RFC 3921) specifications contributed by the XMPP Standards Foundation to the Internet Standards Process, which is managed by the Internet Engineering Task Force in accordance with RFC 2026. Any protocol defined in this document has been developed outside the Internet Standards Process and is to be understood as an extension to XMPP rather than as an evolution, development, or modification of XMPP itself.
The primary venue for discussion of XMPP Extension Protocols is the <standards@xmpp.org> discussion list.
Discussion on other xmpp.org discussion lists might also be appropriate; see <http://xmpp.org/about/discuss.shtml> for a complete list.
Errata can be sent to <editor@xmpp.org>.
The following requirements keywords as used in this document are to be interpreted as described in RFC 2119: "MUST", "SHALL", "REQUIRED"; "MUST NOT", "SHALL NOT"; "SHOULD", "RECOMMENDED"; "SHOULD NOT", "NOT RECOMMENDED"; "MAY", "OPTIONAL".
1. XEP-0166: Jingle <http://xmpp.org/extensions/xep-0166.html>.
2. RFC 3921: Extensible Messaging and Presence Protocol (XMPP): Instant Messaging and Presence <http://tools.ietf.org/html/rfc3921>.
3. XEP-0134: XMPP Design Guidelines <http://xmpp.org/extensions/xep-0134.html>.
4. XEP-0030: Service Discovery <http://xmpp.org/extensions/xep-0030.html>.
5. XEP-0115: Entity Capabilities <http://xmpp.org/extensions/xep-0115.html>.
6. XEP-0226: Message Stanza Profiles <http://xmpp.org/extensions/xep-0226.html>.
7. XEP-0072: SOAP over XMPP <http://xmpp.org/extensions/xep-0072.html>.
8. XEP-0115: Entity Capabilities <http://xmpp.org/extensions/xep-0115.html>.
9. RFC 3920: Extensible Messaging and Presence Protocol (XMPP): Core <http://tools.ietf.org/html/rfc3920>.
10. RFC 3921: Extensible Messaging and Presence Protocol (XMPP): Instant Messaging and Presence <http://tools.ietf.org/html/rfc3921>.
11. RFC 3920: Extensible Messaging and Presence Protocol (XMPP): Core <http://tools.ietf.org/html/rfc3920>.
12. RFC 3921: Extensible Messaging and Presence Protocol (XMPP): Instant Messaging and Presence <http://tools.ietf.org/html/rfc3921>.
13. The Internet Assigned Numbers Authority (IANA) is the central coordinator for the assignment of unique parameter values for Internet protocols, such as port numbers and URI schemes. For further information, see <http://www.iana.org/>.
14. The XMPP Registrar maintains a list of reserved protocol namespaces as well as registries of parameters used in the context of XMPP extension protocols approved by the XMPP Standards Foundation. For further information, see <http://xmpp.org/registrar/>.
15. XEP-0053: XMPP Registrar Function <http://xmpp.org/extensions/xep-0053.html>.
Note: Older versions of this specification might be available at http://xmpp.org/extensions/attic/
Simplified feature discovery to use standard XMPP disco.
(psa)Initial published version as accepted for publication by the XMPP Council.
(psa)Clarified service and feature discovery processes, error flows, and other small matters in the text.
(psa)Defined IQ-get for retrieving supported SIFT features; added support for sifting based on sender type; removed restriction on matching against only the bare JID of the recipient and defined support for sifting on the bare JID, full JID, or both.
(psa)Added requirements section; clarified relation to negative presence priorities.
(jjh/psa)More clearly distinguished between interception and filtering usages; clarified business rules.
(jjh/psa)Added information about service discovery; clarified several small matters in the text.
(psa/jjh)Clarified that SIFT applies to interception of message and presence stanzas directed to the bare JID and to filtering of IQ stanzas directed to the full JID; corrected syntax to match those semantics; added use cases; defined XML schema.
(psa/jjh)Slight clarifications and corrections.
(psa)First draft.
(jjh/jm/psa)END