[jdev] Best ways for a JID to advertise what services it uses?
Bruce Campbell
b+jabber at bruce-2010.zerlargal.org
Wed Oct 6 17:17:07 CST 2010
On Thu, 7 Oct 2010, Sergey Dobrov wrote:
> On 10/07/2010 03:13 AM, Matthew Wild wrote:
>>
>> It occured to me that this issue actually relates to a recurring
>> problem we have in XMPP. When an account is removed from a server we
>> remove subscriptions to their contacts also. Unfortunately there is no
>> standard way to know what services an account may have also been
>> associated with, and so no way to notify them of the accounts
>> deletion.
>
> But what about transports? It's not enough to remove subscription on
> them. We need to unregister also. Otherwise a new JID's owner will be
> allowed to access old owner's legacy accounts...
Account re-use is more of a political problem (ie, do the server
administrators prevent re-use of a given account name for all time, or
allow it to be used after a certain period ) than a protocol problem.
One way to address it would be to 'suggest' that administrators don't
re-use a given account for a given period, and for everything that has
subscriptions to peridocially re-verify all subscribers in some manner.
Ugh.
--
Bruce.
More information about the JDev
mailing list