XMPP Council - 2018-11-07


  1. peter has left
  2. moparisthebest has left
  3. moparisthebest has joined
  4. SamWhited has left
  5. guus.der.kinderen has left
  6. guus.der.kinderen has joined
  7. lnj has joined
  8. lnj has left
  9. ralphm has left
  10. labdsf has left
  11. SamWhited has left
  12. Kev has left
  13. Zash has left
  14. Zash has left
  15. ralphm has left
  16. Zash has left
  17. labdsf has joined
  18. Zash has left
  19. Zash has joined
  20. SouL has joined
  21. ralphm has left
  22. moparisthebest has left
  23. moparisthebest has joined
  24. Ge0rG has joined
  25. Ge0rG It looks like we won't get a formal Council Agenda Mail today, so I'd like to put https://github.com/xsf/xeps/issues/717 for a semi-formal opinion poll for today.
  26. lnj has joined
  27. Holger has left
  28. daniel has left
  29. daniel has joined
  30. Zash has left
  31. daniel has left
  32. daniel has joined
  33. Zash has joined
  34. lnj has left
  35. moparisthebest has joined
  36. moparisthebest has joined
  37. vanitasvitae has joined
  38. vanitasvitae has left
  39. vanitasvitae has joined
  40. vanitasvitae has left
  41. Kev has left
  42. pep. has left
  43. daniel has left
  44. daniel has joined
  45. Kev has left
  46. Zash has left
  47. Zash has left
  48. Zash has left
  49. vanitasvitae has joined
  50. ralphm has joined
  51. vanitasvitae has left
  52. vanitasvitae has joined
  53. vanitasvitae has left
  54. vanitasvitae has joined
  55. labdsf has left
  56. labdsf has joined
  57. vanitasvitae has left
  58. vanitasvitae has joined
  59. vanitasvitae has left
  60. vanitasvitae has joined
  61. vanitasvitae has left
  62. vanitasvitae has joined
  63. daniel has left
  64. daniel has joined
  65. vanitasvitae has left
  66. ralphm has left
  67. Zash has left
  68. Kev has left
  69. Ge0rG It's almost That Time again.
  70. Ge0rG Kev: do you happen to be sufficiently present to chair, in case Dave doesn't appear in time?
  71. dwd has joined
  72. Ge0rG Hey dwd!
  73. Ge0rG Kev, SamWhited, daniel: Meeting time?
  74. dwd I'm reasonably convinced I'll have to vanish.
  75. daniel i’m here
  76. dwd But I'm here for now - really shouldn't chair though in case I'm called away. Ge0rG, want to do the honours?
  77. Ge0rG dwd: at your service.
  78. Ge0rG 1) Roll Call
  79. Ge0rG looks like we have Daniel, Dave and me, so it might be a quorum until Dave vanishes.
  80. dwd Here. Actually meeting cancelled.
  81. dwd (I think).
  82. Ge0rG 2) Lack of Agenda Bashing
  83. SamWhited oops, sorry, I"m here
  84. Ge0rG We don't have an Agenda, into which I tried to sneak https://github.com/xsf/xeps/issues/717 which failed horribly.
  85. Ge0rG We also don't have on our Agenda a list of expired Council votes that we should recast.
  86. Ge0rG Any other additions?
  87. daniel wait did you create an issue on github instead of just writing to the mailinglist?
  88. daniel i’m confused
  89. Ge0rG daniel: I fead I did, yes. But to my defense, I did write to standards@ half a year ago and didn't get an answer to the important question.
  90. dwd I think Ge0rG was hoping he could create an issue to create an agendum.
  91. daniel > I did write to standards@ half a year ago and didn't get an answer to the important question. but that’s the norm for like 50% of the posts there :-)
  92. Ge0rG My train of thought was: create issue, obtain "needs council" tag, make Dave add it to the agenda, discuss today.
  93. SamWhited oh yah, if it only needs council then that was probably fine, I might have misunderstood
  94. SamWhited Then it really is just an issue for the editors (after seeking advise from us)
  95. Ge0rG SamWhited: no, you were right. I violently ignored due process.
  96. daniel ok but lets ignore how it got on the agenda and just pretend it did
  97. Ge0rG I'm not even sure I really want a formal vote on that or just feedback from you folks regarding the change I have in mind.
  98. dwd I can't find XEP-0283, it seems to have been moved.
  99. Ge0rG dwd: unfortunately the new address was lost when it was automatically removed from the roster.
  100. daniel i think a similiar question arised from the muc destroyed thing that has a new jid
  101. Ge0rG So it looks like we have no further items to add to the Agenda and implicitly moved to: 3) https://github.com/xsf/xeps/issues/717
  102. daniel that's in a way the same security question
  103. Ge0rG daniel: the answer there was "tombstones"
  104. dwd But jokes aside, I'd like to see a PR. My gut feeling is that it ought to be possible to satisfy the rationale in §4, while also satisfying automated [re]subscribing.
  105. daniel do i leave the old jid and join the new one
  106. daniel Ge0rG, right yeah. but the question is do i automatically join the new one
  107. daniel which i guess is kinda similiar to do i automatically switch over to the new jid
  108. Ge0rG dwd: to be honest, I don't quite understand the rationale in §4. It looks like a managed environment with auto-approval based on domains? Or is it actually the problem that the receiving client just blindly accepts whatever <moved/> is shoved up to them without checking with the new account?
  109. Ge0rG daniel: right.
  110. dwd Ge0rG, I think basically you're right. A poor implementation which is *too* trusting could certainly be abused. But it feels like limiting trust should give us a reasonable outcome.
  111. Ge0rG IMO, if you prove ownership of old-account and new-account by publishing cross-references on both, it should be enough proof for remote entities to automatically replace your JID
  112. dwd But... I'd like to see a PR. My gut feelings do not constitute advance acceptance. :-)
  113. Ge0rG the only attack vector left is _temporary_ control over an account. But I'd argue that if you take control over my account for a minute, it's compromised anyway
  114. Ge0rG What's the process? The XEP author submitted it in 2010 and I have no idea why it's even in Experimental still.
  115. Ge0rG Do we need to dig up Tory Patnoe?
  116. dwd There are use cases where the new account holder no longer has access to the old account, mind. But those ened to be manual.
  117. jonas’ Ge0rG, make a PR
  118. Ge0rG dwd: yes, I'm not speaking of those.
  119. dwd Ah, no. Council can accept you as a new author. Would you like us to?
  120. jonas’ the author will be pinged via mail and xmpp
  121. jonas’ or council simply overrides it :)
  122. Ge0rG dwd: only after removing all the pseudo-security-issues cruft from it that I don't understand anyway.
  123. Ge0rG So I'll start with a PR and then we can speak about authorship
  124. jonas’ Ge0rG, make a PR which does that and also puts you as author, then.
  125. Ge0rG jonas’: thanks
  126. daniel is this the right time to mention that i don’t like the mutual subscription thing xmpp has going on?
  127. Ge0rG daniel: yes.
  128. SamWhited Agreed.
  129. jonas’ daniel, why, and what would you like to see insetad?
  130. dwd daniel, No. I'd like to hear about it, but not right now.
  131. jonas’ daniel, why, and what would you like to see instead?
  132. Ge0rG SamWhited: with what exactly do you agree?
  133. Ge0rG But I suppose dwd is right, we should move on with our (lack of) Agenda.
  134. SamWhited "i don’t like the mutual subcription thing xmpp has going on"
  135. daniel anyway lets move on
  136. SamWhited (I promise I was paying attention to the discussion before that, I just don't have much of an opinion one way or the other on moved)
  137. daniel should we give Ge0rG ownership of that xep
  138. Ge0rG Unless I hear objections from Sam or Daniel now on allowing automatic JID replacement in 0283, I'll put a PR on my todo
  139. SamWhited I'd like to see a PR. I do have a feeling that changing it so that some other server can force your server to make new S2S connections might be bad somehow.
  140. SamWhited But I can't actually think of any problem, it just feels odd for me to be able to tell something to connect to something else.
  141. Ge0rG SamWhited: that's interesting, I'll consider that
  142. Ge0rG SamWhited: I suppose you shouldn't simply connect on a <moved new/> but wait for a ping from the new account
  143. Ge0rG But as multiple servers are involved, this is prone to race conditions, so the protocol must be bullet-proof in that
  144. daniel yeah i have too much of a headache right now to actually think through the consequences but I'm ok with allowing Ge0rG to make a PR and/or take ownership of a 8 year old xep
  145. Ge0rG Yay!
  146. Ge0rG 4) AOB
  147. SamWhited Me too; it was election night here last night so I was up until 0200 refreshing various news sources compulsively…
  148. SamWhited So I may be a bit foggy today :)
  149. Ge0rG We have another election night on 2018-11-22, and I'd *love* to get rid of the many "EXPIRED"s in the SoD.
  150. jonas’ many of the EXPIREDs are not up for revoting though
  151. jonas’ some of them are VETOED
  152. Ge0rG somebody with a bit of a time budget and RW permissions needs to review the votes.
  153. jonas’ *sigh*
  154. Ge0rG And it looks like everybody here lacks both.
  155. jonas’ dwd, I’ll request +w on the SoD now
  156. dwd At the moment, though I might do before the next meeting.
  157. jonas’ sYdCst5Woy
  158. dwd Gosh, that was incomprehensible, sorry.
  159. dwd jonas’, Best change that password.
  160. SamWhited I'm trying to find mine now; I could have sworn I voted on some of these.
  161. jonas’ dwd, it’s a token I put in my request to get +w
  162. Ge0rG Mind that recasting the votes will give everybody +2W of on-list time, so we will be into the next Council if we don't get our votes together on 21st
  163. labdsf has left
  164. dwd I meant to say: I don't have the time right now, but I might get the time together before the next meeting.
  165. dwd Tedd Sterr did actually collate all the votes for me to put in there.
  166. jonas’ dwd, hand me +w, I might have a slot tomorrow night where I can review at least some of them
  167. Ge0rG dwd: maybe you could give Tedd +w then?
  168. Ge0rG dwd: I don't want to push you into committing to anything, but it would be really great to have that list cleaned up in time for our next Agenda.
  169. SamWhited I was -1 on file sharing notifications at least, so far those are the only minutes I can find (XMPP Council Minutes 2018-08-01).
  170. SamWhited I'll wait if there are others to be added though in case some of the ones I'm looking for are already in Ted's list.
  171. Ge0rG Maybe everyone from Council can try to aggregate their missing votes until end of this week, then?
  172. Ge0rG We've got only 1.5min left, and I still have two Agenda items open.
  173. Ge0rG So I'm moving on for now.
  174. Ge0rG 5) AOAOB
  175. Ge0rG 6) Next Meeting does +1W work for you?
  176. daniel can someone give me a link to that spreadsheet so i know what to vote on
  177. SamWhited WFM
  178. Ge0rG daniel: https://docs.google.com/spreadsheets/d/1AZ-Sna6OiRG--b-mJMKv3XXfrn3Nehm0kAtlyJvImL0/edit#gid=0
  179. daniel i probably can’t do next week
  180. daniel thanks
  181. Ge0rG Looks like we lost Dave.
  182. Ge0rG 7) Close
  183. Ge0rG Thanks everyone! Let's hope +1W works out :)
  184. ralphm has left
  185. jonas’ dwd, thanks, that worked
  186. vanitasvitae has joined
  187. peter has joined
  188. vanitasvitae has left
  189. dwd has left
  190. Tobias has joined
  191. labdsf has joined
  192. Lance has joined
  193. Kev has left
  194. lnj has left
  195. guus.der.kinderen has left
  196. guus.der.kinderen has joined
  197. guus.der.kinderen has left
  198. lnj has left
  199. daniel has left
  200. labdsf has left
  201. labdsf has joined
  202. guus.der.kinderen has joined
  203. SamWhited has left
  204. Tobias has left
  205. Tobias has joined
  206. guus.der.kinderen has left
  207. guus.der.kinderen has joined
  208. Lance has left
  209. Lance has joined
  210. Zash has left
  211. Holger has left
  212. Zash has left
  213. Zash has left
  214. Zash has left
  215. vanitasvitae has joined
  216. vanitasvitae has left
  217. vanitasvitae has joined
  218. Lance has left
  219. Zash has left
  220. SamWhited has left
  221. moparisthebest has joined
  222. moparisthebest has joined
  223. peter has left
  224. dwd has joined
  225. dwd has left