XMPP Council - 2022-02-23


  1. Ge0rG

    It looks like I'll most probably be in a driver's seat today at meeting time

  2. larma

    And because we live in the 21st century, that means you'll have your hands free due to self-driving cars?

  3. Ge0rG

    even if that was the case, which it isn't (my car only has a lane assist that will shutdown after 10s of hands-free), I'd be legally required to not get distracted by my phone.

  4. larma

    I wasn't being serious 😉

  5. Ge0rG

    Sorry!

  6. pep.

    You'll be in a driver's seat, but will it be in a car?

  7. larma

    You mean, train drivers tend to get distracted by their phones all the time?

  8. pep.

    I mean he could have a driver's seat in his garage for all we know and using that as an excuse

  9. larma

    Even if the driver's seat is in a car, he might not be the driver of that car. The seat could be in the car's back row 😉

  10. Ge0rG

    Or it could be _the_ driver's seat of that car, fully functioning, but the car isn't moving. You can't know

  11. larma

    I guess we have to trust you with this 😉

  12. moparisthebest

    larma, thanks for the feedback, updated to: > host-meta files MUST be fetched only over HTTPS, and MUST only use connection URLs starting with 'https://' or 'wss://'. This provides secure delegation, meaning you SHOULD send SNI matching the host of the URL from the connection URL and validate that the certificate is valid for that host *or* the XMPP domain.

  13. larma

    moparisthebest, yes, I like it this way 🙂

  14. moparisthebest

    👍

  15. jonas’

    .

  16. daniel

    It's time

  17. larma

    👋️

  18. daniel

    1) Roll call

  19. moparisthebest

    hello

  20. daniel

    I guess Ge0rG is in fact in a car

  21. daniel

    2) Agenda Bashing

  22. moparisthebest

    I'd like to vote on my updated PRs from last week please

  23. daniel

    moparisthebest modified the two PRs. we are going to vote on that

  24. daniel

    3) Editors update

  25. daniel

    none

  26. daniel

    4) Items for voting

  27. daniel

    a) XEP-0115: mention the pre-image attacks in the XEP https://github.com/xsf/xeps/pull/1168

  28. daniel

    +1

  29. moparisthebest

    +1

  30. jonas’

    +1

  31. larma

    +1

  32. daniel

    Thank you

  33. Sam

    Thanks all.

  34. daniel

    b) The modified PR 1158

  35. daniel

    That's the one removing DNS from 156

  36. moparisthebest

    https://github.com/xsf/xeps/pull/1158 +1

  37. daniel

    +1

  38. larma

    +1

  39. jonas’

    +1

  40. daniel

    c) https://github.com/xsf/xeps/pull/1159

  41. moparisthebest

    +1

  42. daniel

    +1

  43. larma

    +1

  44. daniel

    jonas’, ?

  45. jonas’

    +1

  46. daniel

    5) Pending votes

  47. daniel

    a) Everyone on XEP-0045 Remove more mentions of GC 1.0

  48. daniel

    +1

  49. moparisthebest

    +1

  50. jonas’

    +1

  51. larma

    +1

  52. daniel

    b) Daniel on obsoleting three XEPs

  53. daniel

    +1 to all three

  54. daniel

    c) Jonas on obsoleting XEP-0038

  55. daniel

    and jonas’ on the new proto xep from last week

  56. daniel

    oh and moparisthebest on the new proto xep as well?

  57. daniel

    that's not in my notes but the spreadsheet don’t lie

  58. jonas’

    yeah, +1 on '38

  59. moparisthebest

    https://xmpp.org/extensions/inbox/muc-affiliations-versioning.html right ?

  60. larma

    yes

  61. daniel

    that's the one

  62. jonas’

    worth exploring in experimental I suppose

  63. daniel

    it this a +1?

  64. moparisthebest

    +1 , still unsure about namespaced attributes but that's what experimental is for

  65. jonas’

    yes, that's a +1

  66. daniel

    ok. moving on

  67. daniel

    6) Council Meetings via A/V

  68. daniel

    continuation of last weeks aob

  69. moparisthebest

    wouldn't want to every week, but less frequently would be fine with me

  70. daniel

    i feel like jonas’ maybe wanted to defend the idea a bit more?

  71. jonas’

    maybe

  72. jonas’

    so I think that a regular council high-bandwidth call would be a nice thing to have

  73. moparisthebest

    (I certainly could be convinced otherwise, I wouldn't be the only blocker for instance if everyone else wanted to)

  74. jonas’

    I understand that that's not everyone's cup of tea, and I also hear the concerns about the meetings being as transparent as possible

  75. jonas’

    I also agree that having this on every meeting is probably going to be problematic

  76. jonas’

    Ge0rG was the strongest oppoent, I don't think it makes much sense to discuss this without him present

  77. daniel

    yes I agree

  78. daniel

    moving on then

  79. daniel

    7) Date of Next

  80. moparisthebest

    +1w wfm

  81. daniel

    i'm actually on vacation next week. jonas’ could you take over chair for that week?

  82. jonas’

    daniel, I can, can you send me a reminder?

  83. larma

    I'm also traveling next week, but might still be able to make it.

  84. jonas’

    +1w wfm otherwise

  85. daniel

    I can send the agenda and mention that again in the agenda? (because i'm actually only leaving wednesday so sending the agenda should be fine)

  86. jonas’

    thanks, that would work

  87. daniel

    awesome

  88. daniel

    8) AOB

  89. moparisthebest

    not here

  90. jonas’

    me neiher

  91. larma

    nope

  92. daniel

    9) Close

  93. daniel

    thank you everyone

  94. larma

    Thanks 🙂

  95. moparisthebest

    thanks all, and thanks Sam for updating those security considerations :)

  96. moparisthebest

    outside of the meeting I'd like to get a feel for what you all think about adding more things to host-meta XRD similar to XEP-0156, should that go in 156 or be a new protoxep ?

  97. moparisthebest

    if it changes your opinion, I'd also like to change the business rules, I'll be adding records in the XRD that have SRV info in them, so the "only grab this after you try SRV" will be changed to "you can grab this *instead* of doing SRV"

  98. moparisthebest

    so roughly adding this type of info into the host-meta XML document https://xmpp.org/extensions/inbox/hacx.html#example-1