XSF Discussion - 2023-06-20

https://jabbers.one:5281/file_share/Ir0YLOVRxxqrGK1DeKGToiDQ/20230620_070035742_15ed..jpg

really nice

question regarding security labels, the spec says > The <label/> contains either a single element representing the primary security label or is empty to indicate use of a default. does simply text like <label>SECRET</label> count es element?

or does the spec say, it needs a tag/node like <label><secretspec>MYLABEL</secretspec></label>

As a client doing 258, you mostly don't need to care what's inside the <label/>, you just need to replay the one from the catalogue corresponding to what the user chose.

(Unless you're policy-aware, and you don't want to open that can of worms)

I'd still like to, somehow, find a use case for security labels in a personal private chat context.

Maybe like map something to Snikket Circles...

Like having a NOBUS label for the parents, so they can talk about where the chips and ice cream are hidden without the kids seeing :)

I think there's lots of uses for security labels outside where they're being used, but I'm not entirely sure about personal use :)

its a label for a message

it does not have to be a label related to security

it can just be to organize something

I mean... > XEP-0258: Security Labels in XMPP

<securitylabel xmlns='urn:xmpp:sec-label:0'>

There are clues, if one looks hard enough :)

thats what the XEP was inteded for, but we were talking about usecases outside of that

and if you look at it, its just a label for a message, and server let you configure any text string as label

and clients simply show that to users

That's not exactly true.

I think having non-security labels you can put on messages could be a fine thing, but using XEP-0258 for it isn't a good idea.

Servers that understand XEP-0258 labels properly will start rejecting your messages if you put arbitrary things in them.

i think people who use this use it only internally

no federation, so not really relevant what other servers will do

That's not true :)

It's very interesting for federation in some environments.

Different orgs will definitely have different catalogues of labels. I can imagine "Commercially sensitive" for example. But the lingo does need to be pre-agreed, I should think (or have an ability to map?)

IIRC there's stuff for translating between catalouges, where that make sense.

im just stating what users told me what they use it for

not what we could imagine someone doing with it

> IIRC there's stuff for translating between catalouges, where that make sense. Translating between policies, really, but yes.

> not what we could imagine someone doing with it I am not an expert on this stuff, by any stretch, but it would probably be fair to say I'm not just having to imagine what people might be using it for :)

(Some people, naturally)

mathieui: I’ve added you (manually) to the members@xmpp.org discussion list.