2009/4/25 Will Thompson <[email protected]>: > > Obviously the client should try not to expose the user without them > doing something that obviously exposes them, so prompting them if they > wouldn't expect to be exposed is reasonable. I think that's what the XEP > was trying to ensure, but I think it goes too far. > >
The XEP says that based on configuration, client can auto-populate communication list with trusted entities. You can (for the purposes of end-user implementation) say that everyone in your roster, who you explicitly start communicating with, is a trusted entity and as such can be automatically (without prompting) added to the white-list, if your configuration allows it. Or am I understanding something incorrectly?
