XSF Discussion - 2017-10-27

There is this goldtransfer guy who’s still coming on jabber@conference.jabber.org after having spammed the room, could someone with enough rights ban him (if possible from the entire service)?

I’m only administrator of this room, so I have no power here.

I'm not sure who's maintaining that server, sorry

Me neither, so I hope sending a message here will reach them.

postmaster@jabber.org ?

Xmpp doesn't have well defined addresses like that does it

It does, actually. xmpp@

Hmm did not know, do servers implement that

Do servers implement a standard mail box?

moparisthebest: https://xmpp.org/rfcs/rfc6120.html#contact

In XMPP itself there's {xep 0157}

Zash: XEP-0157: Contact Addresses for XMPP Services (Informational, Active, 2007-01-31) See: https://xmpp.org/extensions/xep-0157.html

will add that to Openfire

we record that stuff, but don't expose it

That one ought to be strongly recommended for public/open services

It should be enabled by default in Prosody imo.

Is it not?

It’s commented out by default. :/

I don't think it should be enabled by default for random personal servers

Random personal servers which don’t want to publish that should be the ones that should be configured to disable it.

Why?

Because most deployments will not change the defaults, which makes the whole network unable to contact their admins.

When I disabled unencrypted s2s, I tried to contact all of the servers’ admins about that move, and out of some 31 I could only find the contacts details of 5, and only one answered.

(They answered that nothing in the RFC forced them to support TLS, so it was our choice to break s2s with them.)

I think we should mandate a contact mailbox for IBR servers and servers with other public registration mechanisms.

As a server dev, I much prefer if privacy decisions are taken by the admins.

Zash: +1

It could be changed to look at if IBR is enabled or not

Currently, if enabled but not explicitly configured, it'll advertise the JIDs of configured admins

Zash: what about making IBR depend on a flag that enables publication of admin JIDs?

Should have pushed that into 0.10... 😕

Zash: couldn't prosody just forward messages to xmpp@domain to the server admin(s) by default?

Seems like it wouldn't be a privacy problem

Oh I see, discovery, yuck

So a server plugin could autogenerate those and forward them to admin

if you're operating a mailserver, you're under no obligation to receive or deliver email, even if the other host is in full compliance

many mailservers require cryptographic and anti-spam measures in order to accept, Google's especially