To be honest, I don't understand the "encrypted roster" discussion.
Even if the server does not see the roster at all, it is able to fully infer
which jids are part of a user's "roster" by just checking the PubSub
subscriptions and fetches of that user.
Isn't an "encrypted roster" implemented this way just a farce?
Or do I miss something important here?
-tmolitor
Am Dienstag, 20. Januar 2026, 18:58:28 CET schrieb Dan Caseley:
On Tue, 20 Jan 2026 at 16:26, Stephen Paul Weber
<singpolyma(a)singpolyma.net>
wrote:
Now if we want to move contacts into pubsub
anyway it feels like what we
really want is boomarks3: bookmarks2 but with wording that makes it clear
that not everything in there is a MUC. This solves all the extended
metadata
questions that have been coming up over recent years while also making
both
things possible to encrypt with pubsub encryption methods as desired.
This sounds like an awesome topic for summit!