> Hi there!
>
> We've got some developers making a really cool jabber IM
> in java, and we've come upon a few things...
> Here is what I got from the developers:
>
> There seems to be a problem in the jabber server concerning
> msn subscriptions.
> When you remove a subscription to an msn-contact the msn-contact
> is not notified that you unsubscribed to him.
> Thus, when you add that person again he is never asked if he
> wants to allow you to subscibe to him - the subscription is just made.
>
> I've experimented with the icq-transport on my own too, and found the
> same being true. To the ICQ contact it seems that I add him without his
> permission...
>
> Is this general for all non-jabber transports?
>
>
> Regards,
>
> Lars
I don't know about the others, but this is what I know about ICQ:
ICQ uses a very insecure method for subscription requests, it is
actually handled *client* side! This means that with a quick patch you
can add anyone to your contact list even in the official client. It
would seem a bit pointless for the ICQ gateway to implement this
client side features :)
Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying
_______________________________________________
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev
