On 28 February 2017 at 16:37, JC Brand <[email protected]> wrote: > 2) Georg opened an PR on MUC private messages, > https://github.com/xsf/xeps/pull/436 > > Dave Cridland thinks it needs some security considerations, in particular > around replacing/removing client-added <x/> stuff.
I'm not wild about this, due to the use of "SHOULD" adding a normative requirement which existing implementations will not, by and large, satisfy. In general, the "right" way to do this would be to introduce a new feature, or a namespace bump - but this change is sufficiently small, and can be done exclusively client-side, so I'm (somewhat reluctantly) going to accept that this is the most reasonable option. Doesn't need the security considerations I thought it might, incidentally. Dave. _______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
