On 9/3/17 11:53 PM, Evgeny Khramtsov wrote: > Sun, 3 Sep 2017 17:07:32 -0600 > Peter Saint-Andre <stpe...@stpeter.im> wrote: > >> Before we spend energy on building a reputation system, it would be >> good to understand what problems it is intended to help solve. IMHO >> nothing will solve 100% of the spam problem, but perhaps a reputation >> system would help. It seems that it might also help solve attacks on >> chat rooms. Anything else? > > I think this is quite enough. The only my concern currently is: do we > really need such complex approach? After we (ejabberd) released the > module which blocks any messages from unsubscribed users we got quite > encouraging results. Currently spammers started to send > subscription requests, although I'm not sure what they want to achieve, > maybe they will stop doing this understanding this is a waste of time > (I think nobody accepts their subscription requests). Any thoughts on > this?
Well, Google Talk had a similar policy years ago and it worked quite well for awhile. If clients don't show the subscription request text (which was probably a stupid idea in 1999, but we were so innocent back then), I agree that the subscription requests are useless, although not harmless because they can be distracting and confusing to most users. One suggestion I've heard is to require proof of work in order to even allow a subscription request to be delivered by the recipient's server. That seems like a promising approach, to me. Peter
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: standards-unsubscr...@xmpp.org _______________________________________________
