Re: [Standards] XEP-0337 Event Logging: Why is PubSub discouraged?

2017-10-14 Thread Peter Waher
Hello Maxime Perhaps the phrasing could be reworked. It relates only to sensitive information, which perhaps should be emphasized. If access to, and lifetime of, what is being published using pubsub can be securely managed, it can of course be used. The problem is that, you have to develop data

[Standards] XEP-0337 Event Logging: Why is PubSub discouraged?

2017-10-13 Thread Maxime Buquet
Hi Standards, I came across 0337 and I like the idea. Reading the security considerations, it is said in [7.3.2]: """ [..] even more care should be taken to log only information that can be published openly. If there's risk for sensitive information to be logged, the publish/subscribe pattern sho