XMPP Authentication

[Luke-Jr]

We haven't discussed authentication much lately, but I feel like benefits of using a XMPP-based system come up fairly often. We get not just simply authentication, but also:
- cross-server messaging (even if the other person isn't playing the game)
- ability to use the same chat room for multiple servers (or people outside the server)
- ability to split server chat into a "chat", "general", "team blue", etc rooms
- much less code for us to write
- a standard protocol for server listing (see Service Discovery)
- allow end-users control over how people appear to them (instead of vice-versa, letting people control how they appear to others)
- plenty of already existing IM servers to register gratis with (many of us already have an account)
- authentication not only for players, but also for other game services like servers (eg, you can identify if a server isn't the original one)
- a readable unique identifier (IM address) for stats recording
- players can add servers to IM roster and check status (# of players, who's playing, etc) without launching the game
- remote admin using any XMPP client

Anything else that needs mentioning? The only standing vulnerability (AFAIK) is DNS poisoning, which could be countermeasured when using SSL whenever possible, and noting (in a flag in any recorded stats, for example) if a previously SSL server is no longer available via SSL.

Sure, we don't get all the anonymity and security of a full-blown key system, but we don't exactly have the need for it (it is just a game, after all), nor IMO the developers needed to implement it without sacrificing time put into other more relevant features.

[Revan]

Wow that has some serious potential in the social part of the game. I would love to be able to do all of that.

[Z-Man]

Sounds like stalker's paradise if you ask me. Make a "Stalking Victims" user group! Know where and when each of them is playing!
Anonymity from the eyes of other players is needed. I can live with server administrators knowing my true identity all the time (after all, they already can track my IP), but it should be my choice whether anyone else sees my name, my ID or my cup size.

[Luke-Jr]

Our server lists already show who's playing on what servers.
You can't see if someone is online or not unless they authorize you.