XMPP Council - 2022-01-26

It's time

1) Roll call

👋️

hello

Ge0rG is on vacation but do we have a jonas’?

I guess not. do we have quorum? i guess so? how does quorum work

¯\_(ツ)_/¯

i'm gonna assume it's ok to move on. 3/5 that's fine...

I have an overrrunning meeting

I can partially pay attention

2) agenda bashing

i assume no changes?

3) Editors update

a) Accepted "Message Replies" as XEP-0461

b) Deprecated and Obsoleted XEP-0443 (Compliance Suites 2021)

4) Items for voting

a) XEP-0060: Release version 1.23.0 https://github.com/xsf/xeps/pull/1152

+1, seems editorial

i find the MUST in there a bit problematic?

like what about services that support it but don’t advertise it

then, they don't support it, I think

I think that's ok

+1

+1

+1

ok. thank you

b) XEP-0004: Release version 2.13.0 https://github.com/xsf/xeps/pull/1153

does this actually help ? :/ I guess a client still can't really count on it...

the MUST helped, but "broke protocol", even though I think we determined all known implementation did that anyway

i wish this would have been posted to the list before it was brought to council

i know there was general discussion on that

daniel, oh, I thought about that (editor hat), but then I thought that council basically asked them to make that PR

we can certainly bounce it to the list

I think i'm on list and would prefer if we give this the participants of the old thread to read first

I'm not 100% convinced of the wording "only process (e.g., apply) the submitted fields".

on-list for me

yea I think some on list discussion would help

which makes voting on c) easy, it can't be done unless b) is accepted

jonas’, would you like to vote on this now or are you on list too?

i'm gonna assume on list

c) can be skipped as moparisthebest pointed out

actually I'd vote c) is entirely editorial if b) is accepted

5) Pending votes

me on the pubsub type thing

yeah, sorry, on list

i'm +1 on that

6) Date of Next

+1w wfm

+1w wfm

+1w wfm

7) AOB

anyone?

none here

nope

8) Close

thank you everyone

Thanks everyone

thanks!

thanks all

should we consider deprecating https://xmpp.org/extensions/xep-0138.html & https://xmpp.org/extensions/xep-0274.html ?

if not the negotiation itself, at least those 2 methods

at absolute minimum we should mention CRIME/BREACH in the security considerations

I know of at least one ~implementation~ hack which resets the dictionary

so the negotiation is probably useful

right, but that needs to be a different method

from a process standpoint how do you deprecate half a final xep :/

I'll drop this here so I don't lose it https://blog.thijsalkema.de/blog/2014/08/07/https-attacks-and-xmpp-2-crime-and-breach/

so yeah, the methods should be deprecated, but the negotiation may be useful