XMPP Council - 2021-05-19

I might be a bit late.

ok

1) Roll Call

Awake!

who do we have? A delayed Ge0rG, an apologized dwd, a present Zash, a potential daniel and a chairy jonas’?

hi

alright, let’s get to it

2) Agenda Bashing

the absence of agenda points is still making me uneasy

so I put something in the AOB section

any other addenda? ✏

probably not

3) Editor’s Update

nada

4) Items for Voting

I have some 280 tasks on my agenda, all unfinished

none

5) Date of Next

+1w wfm

+1w wfm

+¹

+1

cool

6) AOB

https://github.com/xsf/xeps/pull/1059/files

I was thinking, what are the security/privacy implications of that one?

It Depends™

More ways to enumerate accounts?

not quite enumeration, but confirmation

Zash, do you have an idea what it may depend on?

There were concerns raised before about correlating MUC participants, that might apply.

ok

I might put it to the list then

thanks

AO-AOB?

so much in OX is up for interpretation (on how to use it exactly) that the security implications may vary widely

I also remember something about reuse of a "normal" pgp key leaking stuff that way.

for example it is unclear if you are going to reuse the pgp key that you use in email for example

if you do an open access model will leak your identity

but that's entirely unclear. i don’t think there are best practices yet

i'd just leave it to the authors to steer that one into what ever direction they deem fit

ok

I’ll still ask them to write a note in the security considerations

+1

and maybe point the list at it

either way

7) Ite Meeting Est

thanks everyone

Thanks jonas’