[Standards-JIG] proto-JEP: Smart Presence Distribution

Trejkaz trejkaz at trypticon.org
Thu May 18 06:38:33 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 18/05/2006, at 16:29 PM, Philipp Hancke wrote:
> That you are disclosing the privacy list to the remote server each  
> time
> you are doing a presence broadcast.
> The assumption that your privacy list is something secret is not  
> valid.

Actually, you're only disclosing the fragment of the privacy list  
which is relevant to the other server, and that happens no matter what.

Case A: server sends the relevant information to the contact server,  
in order to do simpler multicast presence.  The contact's server now  
guesses the privacy list based on who they see missing from the  
multicast group.

Case B: server sends individual presence stanzas to each contact on  
the remote server.  The contact's server now guesses the privacy list  
based on who they see not receiving presence packets.

The amount of information disclosed is the same, so why not at least  
reduce the traffic?

TX

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD4DBQFEbBZtuMe8iwN+6nMRAkB6AJ9iPCQsYVWLg+VaS3gc3O20RccHkwCY5gdX
1WijkT7jLUSnluBq0UZmFg==
=MDPn
-----END PGP SIGNATURE-----



More information about the Standards mailing list