archive
/
matrix-spec
mirror of https://github.com/matrix-org/matrix-spec
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

more clarifications

Browse Source
pull/1294/head
Hubert Chathi 2 years ago
parent d0cbd4c8dd
commit 19e29e36af
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File

8
content/client-server-api/modules/end_to_end_encryption.md
Unescape Escape View File

@ -1013,6 +1013,10 @@ against this.
3. Clients SHOULD also display a warning and MAY refuse to verify a user when 3. Clients SHOULD also display a warning and MAY refuse to verify a user when
it detects that the user has a device with the same ID as a cross-signing it detects that the user has a device with the same ID as a cross-signing
key. key.
4. If a client does not detect when a device has the same ID as a cross-signing
key, it MUST check key IDs being verified in a consistent order: it must
check if the key ID matches a cross-signing key first, and if not, treat it
as a device ID.
A user's user-signing and self-signing keys are intended to be easily A user's user-signing and self-signing keys are intended to be easily
replaceable if they are compromised by re-issuing a new key signed by replaceable if they are compromised by re-issuing a new key signed by
@ -1615,8 +1619,8 @@ that they can decrypt future messages encrypted using this session. An
messages. messages.
When a client receives a Megolm session, the client MUST ensure that the When a client receives a Megolm session, the client MUST ensure that the
session was received via a channel that ensures authenticity of the messages. session was received via an Olm channel, in order to ensure the authenticity of
Practically speaking, this means that Megolm sessions must be received via Olm. the messages.
When a client is updating a Megolm session in its store, the client MUST ensure: When a client is updating a Megolm session in its store, the client MUST ensure:

Write Preview
Loading…
Cancel
Save