Re: [xmpp] Fwd: 6122bis: servers as "registrars"

[Jehan Pagès <[e-mail]>]

Hi,

2011/7/19 Peter Saint-Andre <[e-mail]>:
> On 7/17/11 3:56 AM, Jehan Pagès wrote:
[...]
>> Note that I remember that the XSF roadmap has an item about preparing
>> us to work on these kind of security considerations: spam, scam,
>> phishing, etc. This kind of discussion could definitely enter as an
>> item in such a working group. Are we creating it?
>
> We already have some on these matters here:
>
> http://tools.ietf.org/html/draft-blanchet-precis-framework-02#section-10.3
>
> http://tools.ietf.org/html/draft-saintandre-xmpp-6122bis-01#section-4.3.2
>
> However, I think we probably want to add more detailed guidance for both
> service providers and client developers.
>

Yes I remember these texts. But as you say, I think we should have
more detailed guidance, and probably also in separate documents. Like
one document could be a guide for public server deployment. And one
other could be a guide for client implementers.

XMPP is great for identifying JIDs but it does not cover all issues,
and especially those i18n matters, though necessary, create many
hard-to-counter attacks (as you showed well with your example in the
Unicode version thread).
One day, if XMPP gets the attention it deserves (and that's the goal),
we'll get there too (people trying to scam others, directly or setting
bots for this, and so on). So let's prepare better than were other
protocols (even though it is a never-ending preparation).

Jehan