[jdev] XEP-0115: Entity Capabilities

Joe Hildebrand hildjj at gmail.com
Wed Jun 27 00:34:57 CDT 2007


On Jun 27, 2007, at 5:53 AM, Sergei Golovan wrote:

> I would consider this XEP dangerous and wouldn't like to implement it
> in Tkabber. It's too easy for malicious user to flood all contacts
> (and not only in his roster) by false information about all clients
> and versions he wants.
>
> I think that one never should apply info received from some user to  
> other users.

Please bring this up on the standards list if you want to talk about  
it again, but this point has been beaten to death, I think.

You can always just query each user independently if you like; you  
only need to check it against the cache to look for disagreement, not  
cache each one separately.

-- 
Joe Hildebrand





More information about the JDev mailing list