XMPP Council - 2022-09-23

Does chair or editor have an opinion on this? https://mail.jabber.org/pipermail/standards/2022-September/038964.html cc daniel jonas’

I'm with goffi

it's just Experimental

productive implementations *are* explicitly discouraged, so I'd hope that folks are aware that there might be open security questions

if they care at all, given that people also just ignore the security considerations

It just seems really security sensitive and I really hate to accept it for even experimental without them

Requiring a Security Considerations section seems more important at Stable and on. Also from a procedural standpoint, it's weird to change the thing you're voting on close to the vote.

I'd be ok with a policy to require security considerations before submission

It's sometimes hard to tack them on afterwards, both spec and implementation wise

Not on this one in particular I think, but sometimes