4d1f2ea4f4
Apply suggestions from code review
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
6660768d85
Don't repeat fast hash bit
5 years ago
027c2d7260
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
a17c74f592
switch medium and address around, space between address and pepper
5 years ago
5580a2a1a9
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
ffbfde8a09
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
87a54e8d8d
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
6119b9a50d
*@hobnobbob.com is unlikely to be guessed
5 years ago
20c72a3649
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: David Baker <dbkr@users.noreply.github.com>
5 years ago
0ac70b268a
Clarify peppering should not happen on none algo
5 years ago
da876bb340
missing word
5 years ago
c6dd5951a1
Clients can cache the hash details if they want to
5 years ago
8f3e588708
pepper is not a secret val. Still needs to be around.
5 years ago
3b8c57e06c
Don't require servers/clients to support "none"
5 years ago
3031df79cc
Add example for none algo
5 years ago
9fd6bd3184
Add details about why this proposal should exist
5 years ago
b26a9ed1fd
Expand on why we can't trust dirty homeservers
5 years ago
577021f12b
resolve some comments
5 years ago
9e264fedc9
Updates
...
* preserve *all* of `create`
* don't preserve `notifications` or `algorithm`, and add some justifcation.
5 years ago
887cd5e7d0
I really hope someone doesn't invest none-hash
5 years ago
0444c8016b
review comments
5 years ago
4503327450
Add some compatibility hacks.
5 years ago
d324cac847
preserve powerlevel
5 years ago
b49a950245
Update proposals/2176-update-redaction-rules.md
...
fix typo
Co-Authored-By: Kitsune Ral <Kitsune-Ral@users.sf.net>
5 years ago
9ebcff5758
fix typo, add section on html details element
5 years ago
36cb8ed894
none -> m.none
5 years ago
1f786ae6dc
commit image into repo, fix typo
5 years ago
d9269b084f
Exclude pubkey endpoints from auth
5 years ago
a1de6ff634
Hopefully clarify some bits
5 years ago
cd5549d483
Proposal to update the redaction algorithm
5 years ago
b09d48a9f7
Spec link
5 years ago
78d46b2890
Proposal to move the `redacts` key to a sane place
5 years ago
25a47afa32
unnecessary capital mk. 2
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
6e061b1baf
unnecessary capital
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
f474b31f5f
typo
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
3514437d24
Ability for client/server to decide on no hashing
5 years ago
9bb6ad80d1
typo
5 years ago
ed67e26037
pepper must not be an empty string, append medium
5 years ago
1963a24832
fix attacks paragraph
5 years ago
dd8a6549c9
Address review comments
5 years ago
701d340da1
Remove exception for request/submitToken
5 years ago
bf8a1e5d5f
Add way to get the HS to bind/unbind existing 3pids
5 years ago
3702669424
update from comments
5 years ago
30dcc28f9b
try & clarify that HS signature isn't the only acceptable auth for unbind
5 years ago
f4a1e02884
simple method once more
5 years ago
4d31ddc8c9
additions and clarifications
...
- indicate how to use MSC 1946 to store/share private keys
- add signing by devices to enable migrating from device verifications
- add information about signature upload failures and M_INVALID_SIGNATURE code
- add security consideration
5 years ago
53bd384f2e
Clarify salting
5 years ago
3aaf181db2
rename some things and add clarification
5 years ago
1a669348d8
http status code
5 years ago
d15c9df115
fullstop
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
e28f7aad72
slash
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
4c72c37b80
slash
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
10858bf83b
set account data after registration
5 years ago
79dbad2914
remove acceptance token mention
5 years ago
ac6b9bdb7c
s/deprecate/remove/
5 years ago
7f65364804
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
03e6ab0103
re-word double openid
5 years ago
d00dfb7822
exclude submittoken too
5 years ago
f02e4c2e9c
both registers are excluded from auth
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
5374030cc0
Drop application/x-form-www-urlencoded in v2
5 years ago
2d11217d4e
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
8af35be13f
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
922a20ba26
small fixes
5 years ago
6f81d3774b
New hashing method
5 years ago
fe14d3c9f0
Spec terms response
6 years ago
786d5bc281
rewrite UI auth tradeoffs
6 years ago
45d630951c
back to M_TERMS_NOT_SIGNED
6 years ago
83bb3861ba
line wrap
6 years ago
8897ea4bb1
Merge branch 'master' into travis/msc/integrations/discovery
6 years ago
a2a7b7ff13
Merge branch 'master' into travis/msc/integrations/auth
6 years ago
bfd8e52c23
Formatting
6 years ago
d8283b9cdf
Add option to use query string
6 years ago
e80753e56c
Add .well-known discovery
6 years ago
4be283ccb3
Typing
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
f95197b422
make the many-anded sentence a list
6 years ago
10a6a59a12
Deprecate `bind_email` / `bind_msisdn`
6 years ago
b5326de1c4
Exclude requestToken endpoints from auth requirement
6 years ago
540aab82a1
accidentally formatted the wrong entry
6 years ago
6260871a21
spoiler fallback to uploaded media
6 years ago
21b9eaf8de
No custom HTTP headers
...
Use the obvious way: in the same place as the ID server address
6 years ago
2694bb1090
Add really horrible custom HTTP header
...
for giving the IS token to the HS
6 years ago
58cf083a6a
backwards compat
6 years ago
6273868323
Clarify v1 API deprecation
6 years ago
4edf826c93
Capitalise on our identifiers
6 years ago
ba7047ce77
Clarify we must be accepting HS auth
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
1d75828c71
Clarify what to do if no (new) docs
6 years ago
af691b5a8a
Clarify this applies to 2134
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
57094276ce
Typing hard is
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
7549c5dd76
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
6 years ago
0fd4fe2542
Add algo/pepper to err resp
6 years ago
dfb37fcce1
update with feedback
6 years ago
df88b13ce1
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
6 years ago
9e0d8b9cb2
Use M_CONSENT_NOT_GIVEN
...
No idea where I got the other one from: we already have one in the
spec, so use it.
6 years ago
0dae2d5812
GET terms must be unauthed.
...
Detail process for new auth (don't register until consent given).
Specifically mention the authentication header.
6 years ago
4f83cc1c24
moved client spoiler conversion to potential issues
6 years ago
6f374dc981
Re-write for OpenID auth
6 years ago
2c09580e27
line wrap
6 years ago
96e43aaf45
Define what characters lookup_pepper can consist of
6 years ago
f951f312e1
Fix terrible wording
6 years ago
fae6883cc0
Update with review comments
6 years ago
0a4c83ddb9
no plural. 3pid -> 3PID
6 years ago
36a35a33cc
Clarify how the spec defines hashing algs
6 years ago
ee10576d60
Update with feedback
6 years ago
abb407145a
HS docs must be added too
...
also, unbind must not error when called by HSes and proxy terms token
6 years ago
8ae47557c9
s/Third Party/Accepted/
6 years ago
2555801458
m.third_party_terms -> m.accepted_terms
...
as it will have the HS's terms too
6 years ago
4ba9b2a599
perfix
6 years ago
a63e4420eb
Linkify
...
Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
6 years ago
02ac0f3b33
Give the user control!
6 years ago
acdb2b1b42
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
6 years ago
e3ff80291f
http err codes and hash wording fixes
6 years ago
21e93a123e
Naming and capitalization
6 years ago
53f025edfc
Specify optional pepper rotation period
6 years ago
2383a55720
404 for deprecated endpoint
6 years ago
c63edc7b97
Clean up wording around peppers and hashes
6 years ago
e3b2ad38b5
pepper -> lookup_pepper
6 years ago
1fea604ba9
Don't define error message
6 years ago
9ca3ccc81c
Add requirments section for de-duping between services.
6 years ago
d4ca0c237a
Specify ID grammar and add comma
6 years ago
276e2b6843
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
cf48030d1f
One more tradeoff
6 years ago
32c7fc638d
you have a number now
6 years ago
23af87e9fc
Proposal for IS & IM TOS API
6 years ago
1343e19a6d
Specify hash algorithm and fallback considerations
6 years ago
f28476f0f3
line wrap and fix wording
6 years ago
3ee27d3818
salt->pepper. 1 pepper/is. add multi-hash idea
6 years ago
f41ed02c9e
remove sec concerns
6 years ago
6bb4a9e911
Add per-is salt consideration
6 years ago
5049e552e7
Drop /api from the new endpoint
6 years ago
bc9b6c3659
Add salt to example and signal link
6 years ago
063b9f60e0
Require a salt to defend against rainbow tables
6 years ago
d2b47a585d
Allow for changing the hashing algo and add at-rest details
6 years ago
f8dbf2b360
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
6 years ago
12431f1a4e
Base64 potential issue
6 years ago
8b92df74ab
s/medium/address
6 years ago
a8c26d208b
Wrap
6 years ago
3eff76b00a
MSC 2134
6 years ago
26349417ba
update spoiler render idea
6 years ago
fc1d8f184d
Merge pull request #2078 from matrix-org/anoa/msc2078
...
MSC2078: Sending Third-Party Request Tokens via the Homeserver
6 years ago
65c3935419
Merge pull request #2076 from matrix-org/rav/proposal/enforce_key_validity_periods
...
MSC2076: Enforce key-validity periods when validating event signatures
6 years ago
19575eb4d4
Merge pull request #2077 from matrix-org/rav/proposal/room_v5
...
MSC2077: room v5
6 years ago
950415c72a
Merge branch 'master' into matthew/msc1779
6 years ago
be568ba9ab
link to the legalified version of MSC1779
6 years ago
9cf03325b9
Merge pull request #2046 from matrix-org/travis/1.0/msc1915-unbind
...
Spec 3PID unbind API
6 years ago
45e271c0f7
be super explicit
6 years ago
7f65704ebc
Update wording and answer review comments
6 years ago
3e23dde341
Be clear that any 3PID token request can now be done by the hs
6 years ago
9000247008
Merge branch 'anoa/msc2078' of github.com:matrix-org/matrix-doc into anoa/msc2078
...
* 'anoa/msc2078' of github.com:matrix-org/matrix-doc:
Update proposals/2078-homeserver-password-resets.md
6 years ago
d3f21e0360
Address review comments
6 years ago
e49518099d
Be explicit with request/responses
6 years ago
395acf8e06
Update proposals/2078-homeserver-password-resets.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
6 years ago
6bb48723e8
The HS can send any URL
6 years ago
6e0af5e64c
If no submit_url, just send it to the IS as before
6 years ago
4174b61279
submit_url only if the user has to enter the code somewhere
6 years ago
8259ae292a
Capitalise SMS
6 years ago
7e18c5d5a8
Add new submit_url response field
6 years ago
8cba7adcdf
Clarify conditions for attack
6 years ago
085c5667a4
wrap lines
6 years ago
1956f1a916
Revert "Remove attacker bit"
...
This reverts commit c9711acbc5
6 years ago
c9711acbc5
Remove attacker bit
6 years ago
4e692735f5
Update some wording
6 years ago
cf932ad4f8
msc2078 - proposal for homeservers sending passwords reset requests
6 years ago
40b10f254b
clarifications
6 years ago
3347a480eb
fix typo
6 years ago
d2ccd6b268
MSC2077: room v5
6 years ago
37b1e171fc
MSC2076: Enforce key-validity periods when validating event signatures
6 years ago
b92b147797
Merge pull request #1719 from uhoreg/olm_unwedging
...
MSC1719: olm session unwedging
6 years ago
fee2ebf682
fix typo
...
Co-Authored-By: Shamil K <me@noteness.in>
6 years ago
dda7afa845
Merge pull request #1717 from uhoreg/e2e_verification
...
MSC1717: common definitions for key verification methods
6 years ago
da5ce919f2
add sharing secrets, and a bunch of cleanups
6 years ago
6929579360
add some clarifications
6 years ago
ffb70a2fab
fix typo
...
Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
6 years ago
84f0d9d7e4
add clarification
6 years ago
0463084924
Spec 3PID unbind API
...
As per [MSC1915](https://github.com/matrix-org/matrix-doc/pull/1915 )
Implementation proof:
* https://github.com/matrix-org/synapse/pull/4982
* https://github.com/matrix-org/sydent/pull/160
The only alteration made which differs from the proposal is clarity on how to handle homeservers not knowing the `id_server`. All other differences are unintentional.
6 years ago
ac08c84612
remove duplicate consideration
...
Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
6 years ago
dd74baa5d0
clarify wording
6 years ago
d39baba21b
add a security note
6 years ago
7705006260
1 hour seems to be fine
6 years ago
273af2a2e0
wrap long lines
6 years ago
6f3bcb56d3
add rendering idea
6 years ago
ebb1351a9f
linebreak consistency
6 years ago
d750115fdc
fix up some things
6 years ago
70d3fd809e
add spoiler msc
6 years ago
7bad359b0d
switch to the 3-key system, and some wording improvements
6 years ago
37871106c6
MSC2002: Proposal for adopting MSC1884 as v4 rooms ( #2002 )
6 years ago
e71b3ac754
Add details to what an unrecognised request is
6 years ago
62748a026d
Rename 0000-leave-reasons.md to 1983-leave-reasons.md
6 years ago
97786da4ad
Create 0000-leave-reasons.md
6 years ago
c1721cb6f7
Merge branch 'master' into babolivier/standardised-federation-response-format
6 years ago
661d69858e
Add fallback
6 years ago
2ae122903f
Use the right name
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
c230c2fd2f
Merge pull request #1967 from aqtusia/master
...
Replace /bind with /3pid/bind
6 years ago
5792e5f4de
Merge pull request #1954 from matrix-org/neilj/Remove-prev_content-from-the-essential-keys-list2
...
MSC1954: Proposal to remove prev_content from the essential keys list
6 years ago
911fb94ea0
typos
6 years ago
2eb9708f7f
Replace /unbind with /3pid/unbind
6 years ago
b41fbc86b6
add further potential issues and security concerns
6 years ago
0bab70c14e
Assign MSC number
6 years ago
d6d0f9780d
Proposal for basic integration manager authentication APIs
6 years ago
b12e92440e
Merge pull request #1930 from matrix-org/travis/msc/tombstone-notif
...
MSC1930: Add a push rule for m.room.tombstone events
6 years ago
cecf75c9a9
Merge pull request #1884 from matrix-org/rav/proposal/no_slash_in_event_id
...
MSC1884: Proposal to replace slashes in event IDs
6 years ago
13d63685d3
Spelling
...
Co-Authored-By: turt2live <travpc@gmail.com>
6 years ago
2dcda7d564
Add a mention that clients should re-query .well-known
6 years ago
dffe19bb76
Rename file to match MSC number
6 years ago
cc10444d4b
Assign MSC number
6 years ago
29a9982447
Proposal for integration manager discovery
6 years ago
99cd064f26
Update original MSC as per proposal guidelines
6 years ago
743eeca27a
MSC to remove prev_content from the essential keys list
6 years ago
efcbf2f807
Merge branch 'master' into matthew/msc1779
6 years ago
88f533f0db
incorporate further feedback
6 years ago
417f3a3e8b
incorporate further feedback from vdh
6 years ago
9dcf2d6a28
Update proposals/1884-replace-slashes-in-event_ids.md
...
Co-Authored-By: ara4n <matthew@arasphere.net>
6 years ago
207d6cf851
update MSC1884 to reflect new conclusions following discussion on the PR
6 years ago
979827bad3
rename to match MSC number
6 years ago
63c6d030fd
draft of secure server-side storage
6 years ago
4e95f8062a
add examples for federation endpoints
6 years ago
696e568fb2
add some clarifications
6 years ago
410a5dbbff
Update proposals/1915-unbind-identity-server-param.md
...
Co-Authored-By: erikjohnston <erikj@jki.re>
6 years ago
bd4fab7a15
Be more explicit identity server selection and errors
6 years ago
0e07a6d243
Proposal to have a push rule for m.room.tombstone events
6 years ago
1c4262e556
Apply suggestions from code review
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
87824c1c96
Update proposals/1219-storing-megolm-keys-serverside.md
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
1749a91344
make MSC mentions into links
6 years ago
4842a718d8
fill in some of the other sections
6 years ago
f9a00fc943
clarify that not understanding a verification method should not auto-cancel
6 years ago
60f1cf79de
Update wording and add deactivate account API
6 years ago
77110b46df
Update proposals/1915-unbind-identity-server-param.md
...
Co-Authored-By: erikjohnston <erikj@jki.re>
6 years ago
ee6513d608
Add alternative sid/client_secret authentication
6 years ago
f92925ed45
Add a 3PID unbind API
6 years ago
82258fc0fc
Proposal for changing event ids. Again.
6 years ago
ca7aa8b0ba
fill in more details, including federation bits
6 years ago
7eb8b5d7f3
Add proposal for invite error code
6 years ago
0051c6a377
Key backup: Return {hash, count} for key upload requests
...
This is this tuple that allows the client to check if it has locally all keys of the backup
6 years ago
7cde3193e5
Key backup: Explain `hash` better
6 years ago
82ff866b58
Key backup: Add `hash` to represent stored keys
...
so that a matrix client A can check it is synchronised with the backup.
If not, that means that another client B has pushed keys client A does not have locally. Client A should then propose to the end user to retrieve keys from the backup.
6 years ago
ed945d6744
Key backup: Expose the number of keys stored in the backup
...
so that matrix clients can compare it with the number of keys they have locally.
6 years ago
e7f7926023
add algorithm and version to the example
...
since they're marked as required
6 years ago
d43b595b5e
Key backup: Fix PR remarks on `PUT /room_keys/version/{version}`
6 years ago
2099308d4c
Key backup: add `PUT /room_keys/version/{version}` to allow matrix clients to add signatures to an existing backup
6 years ago
e02b345c62
Revert "Key backup: add `PUT /room_keys/version/{version}` to allow matrix clients to add signatures to an existing backup"
...
This reverts commit c9b38cbe53
6 years ago
c9b38cbe53
Key backup: add `PUT /room_keys/version/{version}` to allow matrix clients to add signatures to an existing backup
6 years ago
f5134b2d8b
Merge pull request #1819 from matrix-org/neilj/msc-remove-presence-lists
...
MSC:1819 Remove Presence Lists
6 years ago
1cf9086c26
Merge pull request #1831 from matrix-org/travis/msc/wk-before-srv
...
MSC1831: Change the order of .well-known and SRV discovery techniques
6 years ago
41e50d553e
Merge pull request #1830 from matrix-org/travis/spec/x509-wk
...
Specify .well-known s2s discovery and X.509 validation
6 years ago
6421582bf2
Clarifications and alter the error handling of .well-known
...
Note that MSC1831 changes the order, so the changes to MSC1708 might not make sense when combining all the proposals together. However, independently the change should make sense.
6 years ago
00de03bddb
Merge remote-tracking branch 'origin/travis/msc/wk-before-srv' into travis/msc/wk-before-srv
6 years ago
2fe6b2cb5c
Plagiarize from richvdh for a better explanation
6 years ago
ab7876cbef
Update 1831-srv-after-wellknown.md
6 years ago
0e90cf6a0c
Proposal to change the order of .well-known and SRV discovery techniques
6 years ago
ccce6c196d
Specify how capabilities work in the c2s API
...
Original proposals:
* https://github.com/matrix-org/matrix-doc/pull/1753
* https://github.com/matrix-org/matrix-doc/pull/1804
Implementation proof:
* https://github.com/matrix-org/synapse/pull/4472
* https://github.com/matrix-org/matrix-js-sdk/pull/830
There is one change to MSC1753 which is included in this commit. MSC1804 remains unchanged. In the original proposal, the change password capability being present was an indication that password changes were possible. It was found that this doesn't really communicate the state very well to clients in that lack of a capability (or a 404, etc) would mean that users would erroneously not be able to change their passwords. A simple boolean flag was added to assist clients in detecting this capability.
6 years ago
72a2871021
Merge pull request #1804 from matrix-org/travis/msc/room-version-client-advertising
...
MSC1804: Advertising capable room versions to clients
6 years ago
Andrew Morgan