I’m building an app on top on Openfire, but I’m having some privacy issues because of this topic. Any user can virtually chat with another one, even if the second one have not the first one on its roster.
In fact, i have disabled all subscription packets via http://www.igniterealtime.org/projects/openfire/plugins/subscription/readme.html, and i can still add anyone to my roster, and talk with him.
Is there any plugin to prevent this? (i.e. drop any packet from anyone who is not in my roster) I have already tried with http://community.igniterealtime.org/docs/DOC-1050 but it seems not to be such an option.
Thanks in advance.