[Members] In-Band Regiration with Jabber.org

[Tomasz Sterna]

On 10/26/06, Robert B Quattlebaum, Jr. <darco at deepdarc.com> wrote:
> I really think that jabber.org should not allow anonymous jabber:iq:register
> for account creation. I think that it sets a bad precedent, and is ripe for
> automation and other sorts of abuse. At the very least, jabber.org should do
> some sort of email-address verification, but currently it does nothing.

I can't see why we cannot do e-mail verification during in-band registration.
Or any other method of verifing users.
How does registering via HTTP differ from registering via XMPP?


> on the jabber.org site. Such a page should have a CAPTCHA and at least get

You've said a very, very bad word. I see a flame coming. :-)

But... We have mathod for that.
http://www.xmpp.org/extensions/xep-0158.html


> We need to take measures now to help prevent the public federated jabber
> network from becoming a hostile environment.

It was discussed before:
http://www.xmpp.org/extensions/xep-0158.html
http://www.xmpp.org/extensions/xep-0159.html
http://www.xmpp.org/extensions/xep-0161.html
http://www.xmpp.org/extensions/xep-0165.html

-- 
smk