2018-01-10 19:39 GMT+01:00 Georg Lukas <ge...@op-co.de>: > My only issue is that an 84-only client will upload the avatar under the > assumption that it will be limited to contacts, but the server will open > it to the whole world. Requiring a client update to let the user know > the implications is not how this problem can be solved.
On second thought. vCard avatars (and all information in there) have been public for decades. I have never seen a single client that warned users about this fact. I'm not sure that we desperately need to change that by either stop making avatars public or by warning users about it. Just because the underlying technology changes doesn't mean the users assumption changes. So either users already assume that avatars are public or we need to obsolete vCards right now and mark it a very dangerous XEP that leaks information without the user knowing. cheers Daniel _______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: standards-unsubscr...@xmpp.org _______________________________________________
