XSF Discussion - 2023-06-20

  1. emus


  2. emus

    really nice

  3. lovetox

    question regarding security labels, the spec says > The <label/> contains either a single element representing the primary security label or is empty to indicate use of a default. does simply text like <label>SECRET</label> count es element?

  4. lovetox

    or does the spec say, it needs a tag/node like <label><secretspec>MYLABEL</secretspec></label>

  5. Kev

    As a client doing 258, you mostly don't need to care what's inside the <label/>, you just need to replay the one from the catalogue corresponding to what the user chose.

  6. Kev

    (Unless you're policy-aware, and you don't want to open that can of worms)

  7. Zash

    I'd still like to, somehow, find a use case for security labels in a personal private chat context.

  8. Zash

    Maybe like map something to Snikket Circles...

  9. Zash

    Like having a NOBUS label for the parents, so they can talk about where the chips and ice cream are hidden without the kids seeing :)

  10. Kev

    I think there's lots of uses for security labels outside where they're being used, but I'm not entirely sure about personal use :)

  11. lovetox

    its a label for a message

  12. lovetox

    it does not have to be a label related to security

  13. lovetox

    it can just be to organize something

  14. Kev

    I mean... > XEP-0258: Security Labels in XMPP

  15. Kev

    <securitylabel xmlns='urn:xmpp:sec-label:0'>

  16. Kev

    There are clues, if one looks hard enough :)

  17. lovetox

    thats what the XEP was inteded for, but we were talking about usecases outside of that

  18. lovetox

    and if you look at it, its just a label for a message, and server let you configure any text string as label

  19. lovetox

    and clients simply show that to users

  20. Kev

    That's not exactly true.

  21. Kev

    I think having non-security labels you can put on messages could be a fine thing, but using XEP-0258 for it isn't a good idea.

  22. Kev

    Servers that understand XEP-0258 labels properly will start rejecting your messages if you put arbitrary things in them.

  23. lovetox

    i think people who use this use it only internally

  24. lovetox

    no federation, so not really relevant what other servers will do

  25. Kev

    That's not true :)

  26. Kev

    It's very interesting for federation in some environments.

  27. Fishbowler

    Different orgs will definitely have different catalogues of labels. I can imagine "Commercially sensitive" for example. But the lingo does need to be pre-agreed, I should think (or have an ability to map?)

  28. Zash

    IIRC there's stuff for translating between catalouges, where that make sense.

  29. lovetox

    im just stating what users told me what they use it for

  30. lovetox

    not what we could imagine someone doing with it

  31. Kev

    > IIRC there's stuff for translating between catalouges, where that make sense. Translating between policies, really, but yes.

  32. Kev

    > not what we could imagine someone doing with it I am not an expert on this stuff, by any stretch, but it would probably be fair to say I'm not just having to imagine what people might be using it for :)

  33. Kev

    (Some people, naturally)

  34. stpeter

    mathieui: I’ve added you (manually) to the members@xmpp.org discussion list.