archive
/
matrix-spec
mirror of https://github.com/matrix-org/matrix-spec
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove point about Element showing unexpected devices

Browse Source
pull/977/head
Will Hunt 3 years ago committed by GitHub
parent 538ac0940e
commit b8ab3d0c87
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File

3
proposals/2778-appservice-login.md
Unescape Escape View File

@ -125,9 +125,6 @@ this is not a problem because:
difference is that without a dedicated access token they are unable to receive device messages. While in theory this difference is that without a dedicated access token they are unable to receive device messages. While in theory this
does make them unable to see encrypted messages, this is not designed to be a security mechanism. does make them unable to see encrypted messages, this is not designed to be a security mechanism.
- An appservice trying to log in as a user will always create a new device, which means the user would be informed of the
new device on their existing sessions. It should be very obvious if a malicous appservice is creating new devices on your account.
In conclusion this MSC only automates the creation of new devices for users inside an AS namespace, which is something In conclusion this MSC only automates the creation of new devices for users inside an AS namespace, which is something
a server admin could already do. Appservices should always be treated with care and so with these facts in mind the MSC should a server admin could already do. Appservices should always be treated with care and so with these facts in mind the MSC should
be considered secure. be considered secure.

Write Preview
Loading…
Cancel
Save