|
|
@ -7,7 +7,8 @@ Currently, mapping from a server name to a hostname for federation is done via
|
|
|
|
them, and there may be other practical difficulties in their deployment such
|
|
|
|
them, and there may be other practical difficulties in their deployment such
|
|
|
|
as poor support from hosting providers. [^1]
|
|
|
|
as poor support from hosting providers. [^1]
|
|
|
|
|
|
|
|
|
|
|
|
* It is likely that we will soon require valid X.509 certificates on the
|
|
|
|
* [MSC1711](https://github.com/matrix-org/matrix-doc/pull/1711) proposes
|
|
|
|
|
|
|
|
requiring valid X.509 certificates on the
|
|
|
|
federation endpoint. It will then be necessary for the homeserver to present
|
|
|
|
federation endpoint. It will then be necessary for the homeserver to present
|
|
|
|
a certificate which is valid for the server name. This presents difficulties
|
|
|
|
a certificate which is valid for the server name. This presents difficulties
|
|
|
|
for hosted server offerings: BigCorp may be reluctant to hand over the
|
|
|
|
for hosted server offerings: BigCorp may be reluctant to hand over the
|
|
|
@ -140,4 +141,3 @@ will allow greater flexibility in deploying homeservers.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[^1] For example, Cloudflare automatically "flattens" SRV record responses.
|
|
|
|
[^1] For example, Cloudflare automatically "flattens" SRV record responses.
|
|
|
|
|
|
|
|
|
|
|
|