|
|
|
@ -109,11 +109,11 @@ caveat that servers must ensure that:
|
|
|
|
|
prevents situations where any homeserver could process the join, even if
|
|
|
|
|
they weren't in the room, under certain power level conditions.)
|
|
|
|
|
|
|
|
|
|
This creates a new restriction on the relationship between the resident
|
|
|
|
|
servers used for `/make_join` and `/send_join` -- they must now both go to
|
|
|
|
|
the same server (since the `join_authorised_via_users_server` is added in
|
|
|
|
|
the call to `/make_join`, while the final signature is added during
|
|
|
|
|
the call to `/send_join`).
|
|
|
|
|
The above creates a new restriction on the relationship between the resident
|
|
|
|
|
servers used for `/make_join` and `/send_join` -- they must now both go to
|
|
|
|
|
the same server (since the `join_authorised_via_users_server` is added in
|
|
|
|
|
the call to `/make_join`, while the final signature is added during
|
|
|
|
|
the call to `/send_join`).
|
|
|
|
|
|
|
|
|
|
Note that the homeservers whose users can issue invites are trusted to confirm
|
|
|
|
|
that the `allow` rules were properly checked (since this cannot easily be
|
|
|
|
|