XMPP取消订阅/订阅状态泄露隐私

发布于 2024-12-12 01:42:35 字数 406 浏览 0 评论 0原文

我开始使用 XMPP,对我来说立即突出的一件事是,由于订阅只能在一个方向上,因此花名册可以与以下订阅状态进行联系:

-none -到 -从 -两者

我对这个模型的问题是,用户可以判断是否有人“阻止”他们(取消订阅)、尚未批准订阅或没有重新订阅。

从信使风格来看,如果您不批准订阅或删除订阅,您会认为他们已经批准了订阅,但只是发送离线状态。

另外,关于删除,XMPP 规定服务器必须告诉联系人客户端您已取消订阅。我知道大多数客户不会对此采取行动,但这意味着他们可能会弹出类似于“X 联系人已将您从他们的列表中删除”的内容。我认为这是隐私泄露。如果我想阻止/删除某人,我希望他们不知道,只看到我离线。

为什么会这样?有什么具体原因吗?有没有官方的方法来解决这个问题(不暴露订阅状态)?

I'm starting to work with XMPP, and one of the things that stood out right away to me was the fact that since subscriptions can be in just one directions, the roster can have a contact with a subscribe state of:

-none
-To
-From
-Both

The problem I have with this model is that a user can tell if someone "blocked" them (unsubscribed), hasn't approved a subscription or isnt subscribed back.

Looking at it from the messenger style, if you don't approve a subscription or remove one, you its seen as if it they had approved the subscription, but just send offline presence.

Also on the removal, XMPP states that the server must tell the contact client that you have unsubscribed from them. I know most clients wont act upon this, but it means they COULD pop up something akin to "X contact has removed you from their list". Which I think is a privacy leak. If I want to block/remove people I'd prefer them not to know and just see me offline.

Is there a specific reason of why this is this way? Is there an official way to get around it (not exposing subscription status)?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

内心激荡 2024-12-19 01:42:35

从某种角度来看,事情总是这样,主要是因为早期的 Jabber 开发人员都认为,当有人要求查看您的存在时,您应该说“不”,除非您确定。

也就是说,您可以使用隐私列表来阻止您外出。

From a certain perspective, it's just always just been like this, mostly because the early Jabber developers all took the perspective that you should just say "no" when someone asked to see your presence, unless you were sure.

That said, you can use Privacy Lists to block your outgoing presence.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文