[Pidgin] #16831: print policy-violation instead of useless error message

Pidgin trac at pidgin.im
Fri Dec 25 03:28:17 EST 2015


#16831: print policy-violation instead of useless error message
-------------------------+-------------------------------------------------
 Reporter:  stefan       |      Owner:  deryni
     Type:  enhancement  |     Status:  new
Milestone:               |  Component:  XMPP
  Version:  2.10.11      |   Keywords:  user experience, xmpp, error
                         |  message, policy violation
-------------------------+-------------------------------------------------
 while trying to add an existing xmpp account, i happened to try the
 password multple times. resulting in an obvious policy violation.

 however, pidgin doesn't display a useful error message, it just states
 that there was a policy violation, which isn't very helpful.

 i had to use xmpp console, to see which policy i violated:
 {{{
 <error xmlns='http://etherx.jabber.org/streams'>
         <policy-violation xmlns='urn:ietf:params:xml:ns:xmpp-streams'/>
         <text xmlns='urn:ietf:params:xml:ns:xmpp-streams' lang=''>Too many
 (6) failed authentications from this IP address (::FFFF:x.y.z.1). The
 address will be unblocked at 08:47:59 25.12.2015 UTC</text>
 </error>
 }}}

 from a UX and security perspective it would make more sense to display the
 second message (even when it's not translated), since users may tend to
 try out different connection options first, which is a potential security
 risk (eg. no tls connection + allow plain text auth over unencrypted
 streams).

--
Ticket URL: <https://developer.pidgin.im/ticket/16831>
Pidgin <https://pidgin.im>
Pidgin


More information about the Tracker mailing list