On Dienstag, 5. Januar 2021 18:00:02 CET Jonas Schäfer wrote: > The XMPP Extensions Editor has received a proposal for a new XEP. > > Title: MUC Mention Notifications > Abstract: > This specification documents how a user may be informed when they're > mentioned in a MUC which they're not currently joined to. > > URL: https://xmpp.org/extensions/inbox/muc-mention-notifications.html
One note which I think wasn’t mentioned in the pre-discussion thread for this ProtoXEP: This can be used to spam users, without cooperation of the MUC service. 1. Add a user to the affiliation list. 2. Configure the MUC to send out mentions. 3. Mention them with a reference. 4. ??? 5. Profit! There are probably ways to prevent that, but those need to be written down in the Security Considerations before this can move on to Draft (it is OK as-is to move to Experimental, hence I’ll vote +1 in the meeting in a few mins). kind regards, Jonas
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
