[JDEV] groupchat tweak suggestions

[Oliver George]

Keith Minkler wrote:
> 
> Hi,
> 
> I have compiled the server successfully on Solaris 2.7, and we managed to get it installed on 2.5 (after MUCH fighting) so I do know that it is very possible.. One of the problems with installing on Solaris, is you need to be using gmake, not make.. some of the makefiles are setup to use make, so you will have to change the:
> MAKE=make
> line in the Makefile to
> MAKE=gmake

Hi,  Work has been done on groupchat, these comments may well be wrong
but I'd appreciate any comments...

FACT: a resource is created for a user as "shahash(jid_full(u->user))"

This is good because you can track (client side block) a user reliably.

Problem 1: you could check if it is a particular person by hashing their
jid yourself and comparing.
Solution 1: a secret could be added to the string to be hashed (which
never changes) so you can't reverse lookup.  NB this secret can never
change if clients are to track successfully.

Problem 2: you can hide by changing case of your jid (causing a new hash
value for you jid)
Solution 2: I propose that a jid is converted to all lowercase to ensure
a 1 to 1 mapping.

Personally i'm against per-group nickname registration but i can see the
case for it in private chat (read: groupchat).


Thanks, slimy.

jabber: slimy at jabber.org