[JDEV] Querying Rosters...

[Peter Saint-Andre]

We have been developing and using Jabber for well over three years and no
one has ever seen or reported this behavior. Please provide a test case.

Peter

--
Peter Saint-Andre
email+jabber: stpeter at jabber.org
weblog: http://www.saint-andre.com/blog/

Ritu Khetan wrote:

> I just found out that it is possible for users to
> query each other rosters which would reveal the buddy
> list of the respective user.
> I feel this is highly unfavorable as people do not wish
> to share their buddy lists with others.
> Further, as rosters (esp. this part) are managed by the
> server, clients cannot afford to play with them by
> qualifying them by a private namespace.
> Are there any ideas on how we can take care of this? Is
> any work being done on this in the next version of Jabber?