It’s also worth adding that it would make sense to have a PEP service for the 
server itself (i.e., at `example.org` instead of `[email protected]`), which 
would simplify several use cases, including the XEP-0485 one. This would avoid 
the problem stated in § 7 Privacy Considerations:

> The mere presence of an applicable pub-sub node MUST NOT be used for Service 
> Discovery purposes, as under common service configuration, non-administrative 
> users are allowed to create such nodes.

As with a PEP for the server itself, non-administrative users could not create 
anything.

This PEP for server itself idea was already proposed by Mathieu Pasquet with 
an earlier version of XEP-0455.

Best,
Goffi

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Standards mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to