[Standards] Expected behavior when blocking all unknown JIDs

Evgeny Khramtsov xramtsov at gmail.com
Sun Jan 15 07:26:05 UTC 2017


Fri, 13 Jan 2017 20:36:39 +0100
Kim Alvefur <zash at zash.se> wrote:

> If we think of blocking strangers by default as a privacy protection
> measure

Not everyone wants such rude default privacy.

> Second, MUC can be made to work if the server allows traffic from
> JIDs to which directed presence has been sent.

And what about IQ? What if one wants to use http-upload service?
Probably there is a use case for messages too. So, basically, we should
accept all incoming traffic from an entity if outgoing traffic has
been sent to that entity?

> Third, subscription requests should probably not be blocked by
> default. It may be sensible UX to present blocking as an optional
> response.

Subscription spam problem is still unresolved in this case.


More information about the Standards mailing list