From 19103f4e6657d3dbe49f7cd27356ff20825d35bb Mon Sep 17 00:00:00 2001
From: Peter Saint-Andre <stpeter@stpeter.im>
Date: Fri, 13 Jul 2012 14:11:12 -0600
Subject: [PATCH] 0.3

---
 xep-0276.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/xep-0276.xml b/xep-0276.xml
index dc9e1004..7ddf6d77 100644
--- a/xep-0276.xml
+++ b/xep-0276.xml
@@ -26,6 +26,12 @@
   </author>
   &stpeter;
   &robmcqueen;
+  <revision>
+    <version>0.3</version>
+    <date>2012-07-13</date>
+    <initials>psa</initials>
+    <remark><p>Tweaked the security considerations.</p></remark>
+  </revision>
   <revision>
     <version>0.2</version>
     <date>2012-07-11</date>
@@ -195,7 +201,7 @@
 
 <section1 topic='Security Considerations' anchor='security'>
 
-  <p>Because decloaking is a presence leak (albeit intentional), an XMPP client that implements the receiving side of this specification MUST disable sharing of session presence by default and MUST enable the feature only as a result of explicit user configuration. (Gateways and other non-user entities MAY divulge their own presence and capabilities unconditionally, if that is appropriate for the service policy at the gateway.)</p>
+  <p>Because decloaking is a presence leak (albeit intentional), an XMPP client that implements the receiving side of this specification MUST disable sharing of session presence by default and MUST enable the feature only as a result of explicit user confirmation. Such confirmation can be provided per request, at the first request per requestor, by setting some "always decloak" configuration option (e.g., globally or per domain), or through some other suitable means as long as decloaking does not occur by default. (Gateways and other non-user entities MAY divulge their own presence and capabilities unconditionally, if that is appropriate for the service policy at the gateway.)</p>
 
 </section1>
 
@@ -235,7 +241,7 @@
 </section1>
 
 <section1 topic='Acknowledgements' anchor='ack'>
-  <p>The need for this protocol extension, and a rough proposal for solving the problem, were originally determined at XMPP Summit 5 in the summer of 2007. Thanks to Diana Cionoiu, Justin Karneges, and Justin Uberti for their input to those discussions.</p>
+  <p>The need for this protocol extension, and a rough proposal for solving the problem, were originally determined at XMPP Summit 5 in the summer of 2007. Thanks to Diana Cionoiu, Justin Karneges, and Justin Uberti for their input to those discussions. Thanks also to Kurt Zeilenga for his feedback on the resulting specification.</p>
 </section1>
 
 </xep>