Re: [JDEV] Querying Rosters...

2002-04-26 Thread Ritu Khetan
Thanks for ur concern temas. Peter has now cleared my doubt. Regards, Ritu Quoting Thomas Muldowney <[EMAIL PROTECTED]>: > Could you provide an example of what you\'re asking? I\'m not following. > > --temas > > > On Wed, 2002-04-24 at 02:03, Ritu Khetan wrote: > > Hello, > > > > I just fou

Re: [JDEV] Querying Rosters...

2002-04-25 Thread Thomas Muldowney
Could you provide an example of what you're asking? I'm not following. --temas On Wed, 2002-04-24 at 02:03, Ritu Khetan wrote: > Hello, > > I just found out that it is possible for users to > query each other rosters which would reveal the buddy > list of the respective user. > I feel this

re: [JDEV] Querying Rosters...

2002-04-25 Thread Peter Saint-Andre
It doesn't matter what to address you put on this iq chunk, you will always get your own roster (i.e., the roster of the sending entity). From addresses are essentially ignored (they are supplied by the server to prevent spoofing), which is why the from address on the iq reply is you@yourhost/curr

re: [JDEV] Querying Rosters...

2002-04-25 Thread Ritu Khetan
hey! I am highly confused. I guess you are right. I tried it again and this time it sent the user\'s roster rather than the buddy\'s roster. The packet that came back was quite weird though..as the to and from jids did not get switched.. It looked like this.. Send: Recv: My Resources Anywa

re: [JDEV] Querying Rosters...

2002-04-24 Thread Peter Saint-Andre
We have been developing and using Jabber for well over three years and no one has ever seen or reported this behavior. Please provide a test case. Peter -- Peter Saint-Andre email+jabber: [EMAIL PROTECTED] weblog: http://www.saint-andre.com/blog/ Ritu Khetan wrote: > I just found out that it i

[JDEV] Querying Rosters...

2002-04-24 Thread Ritu Khetan
Hello, I just found out that it is possible for users to query each other rosters which would reveal the buddy list of the respective user. I feel this is highly unfavorable as people do not wish to share their buddy lists with others. Further, as rosters (esp. this part) are managed by the ser