XSF Discussion - 2022-04-19

moparisthebest: you may want to provide some metadata around that .pgp file that is retrievable without retrieving the whole file. like who this is encrypted for, etc.

You might also decide whether you encrypt with a passphrase and provide the passphrase in the metadata. So you could send a file to multiple accounts after uploading without having to encrypt with another key reupload.

so like the method used with OMEMO? :)

Maybe more proper and not just dumping a link in body.

we do have a xep for that, don't we?

https://xmpp.org/extensions/inbox/omemo-media-sharing.html This one?

Even https://xmpp.org/extensions/xep-0454.html

But yeah, that's where you "dump a link in body"

From 0448: > 5. Security Considerations > > Yes. ಠ_ಠ

mjk: it's a very recent xep, maybe propose changes :p

I know, there are also references to XEP-xxxx everywhere suggesting the same :)

Dear Board, a short heads-up on GSoC: Right now the proposal deadline ends. We have received four proposals (I havent checed the latest status since lunch time, but I assume there were not much more coming). Anyway, we are going to review this soon and then hopefully get enough slots for the proposals that seem feasible. ralphm MattJ jcbrand arc CC: flow

👍