>> Hi Everyone,
>> 
>> I was doing some testing today and was attempting to send IQs from one 
>> client to another.  I was getting a service-unavailable error so I stepped 
>> through the code.  It looks like RelayingIQHandler is checking the sender's 
>> roster before relaying the stanza, and sending the error if the target isn't 
>> in the roster.
>> 
>> Looking at section 10 of the spec I don't see anything about doing a roster 
>> check on IQs.  Do you think this is a bug, or am I missing something else in 
>> the spec?
> 
> In general, messages are only delivered from client A to B when B has 
> accepted to do so. This in general is done by completing the presence 
> subscription process, which normally leads to roster entries.

That makes sense, but per the spec and other implementations I don't think it 
is correct.

> 
> So, client A is unable to spam B without B's consent.
> 

I think XEP-0016 is the correct way to handle this.

-Mike

Reply via email to