[zeromq-dev] ZAP RFC (#27) clarification

[Pieter Hintjens]

Hi Merijn,

> RFC 27 mentions the following fields for authentication requests:
> • The domain, which SHALL contain a string.
> • The identity, the identity of the originating ZeroMQ socket.
> • The mechanism, which SHALL contain a string.
>
> I wanted to clarify the following ambiguities:
>
> 1) Where does the "domain" value come from? Is this set on the socket receiving the connection? Part of the metadata send along during the handshake?

Indeed, it's set on the socket receiving the connection, via the
ZMQ_ZAP_DOMAIN socket option.

> 2) identity mentions "originating ZeroMQ socket", does this refer to the remote sender or to the identity of the socket being connected to? (i.e. remote socket A with identity 1 connects to socket B with identity 2, socket B generates an authentication request, does this request have identity 1 or 2?)

It's similar to the domain (and I think might be scrapped); set on the
binding socket and used to separate different authentication streams.

> 3) mechanism: I assume this is supposed to be identical to the string value in the ZMTP header?

Yes.

-Pieter