[Standards] publish+configure again

Maciek Niedzielski machekku at uaznia.net
Fri Mar 30 11:29:49 UTC 2007


Ian Paterson wrote:
> Maciek Niedzielski wrote:
>> People who want publish+configure say that this protects from publishing
>> private information to too big audience. But it doesn't really help! As
>> Ralph said some time ago, configuration is done per node, not per item.
>> So it's pretty naive to think that that publish+configure can make the
>> item 100% safe. You can switch node to whitelist mode and publish your
>> secret item, but a moment later node can be switched to
>> open/presence/etc and your secret information will leak.
> 
> FYI, to summarise what was said before:
> Some nodes will be defined to only have one item. p+c will be useful for
> those nodes. p+c is optional, clients can choose not to use it for
> multi-item nodes.

Would it be forbidden to change configuration of such node without
publishing new item (and replacing the old one)?

-- 
Maciek Niedzielski
 Psi developer, XSF member
 xmpp:machekku at uaznia.net
                               " BTW: We could use PEP for this ;) "



More information about the Standards mailing list