3877724774
fix speeling
5 years ago
c401a4d47b
punctuation
5 years ago
acf8d34474
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
3789d828fd
Incorporate solution analysis from the context of attacks
5 years ago
36e43ee326
Rewrap lines in MSC2917 to 80 chars wide
...
Signed-off-by: Olivier Wilkinson (reivilibre) <olivier@librepush.net>
5 years ago
80adbaff4c
switch to MSC1946 for storing recovery key
5 years ago
825757ffd8
add information about verifying backup by entering key
5 years ago
bd9efcdf53
add some information and an example
5 years ago
d47e13c6d9
this FIXME will be addressed in the key backup MSC
5 years ago
395d40314b
fix typos and make valid JSON
5 years ago
f989263872
MSC2181: Add an Error Code for Signaling a Deactivated User ( #2181 )
5 years ago
0c7c48bd12
MSC2175: Remove the `creator` field from `m.room.create` events ( #2175 )
...
Fixes #1193
5 years ago
33d22c3320
hashes are not stream ciphers
5 years ago
9913f5bc29
Slightly clarify pepper value
5 years ago
57de107ea9
Move medium back behind the address
5 years ago
f1f293678b
Apply suggestions from code review
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
Co-Authored-By: Kitsune Ral <Kitsune-Ral@users.sf.net>
5 years ago
4c22eb86b5
MSC for Search Filtering in Federation /publicRooms
...
Signed-off-by: Olivier Wilkinson (reivilibre) <olivier@librepush.net>
5 years ago
c8527b7af8
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
4d1f2ea4f4
Apply suggestions from code review
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
6660768d85
Don't repeat fast hash bit
5 years ago
027c2d7260
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
a17c74f592
switch medium and address around, space between address and pepper
5 years ago
5580a2a1a9
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
ffbfde8a09
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
5 years ago
87a54e8d8d
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
5 years ago
6119b9a50d
*@hobnobbob.com is unlikely to be guessed
5 years ago
20c72a3649
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: David Baker <dbkr@users.noreply.github.com>
5 years ago
0ac70b268a
Clarify peppering should not happen on none algo
5 years ago
da876bb340
missing word
5 years ago
c6dd5951a1
Clients can cache the hash details if they want to
5 years ago
8f3e588708
pepper is not a secret val. Still needs to be around.
5 years ago
3b8c57e06c
Don't require servers/clients to support "none"
5 years ago
3031df79cc
Add example for none algo
5 years ago
9fd6bd3184
Add details about why this proposal should exist
5 years ago
b26a9ed1fd
Expand on why we can't trust dirty homeservers
5 years ago
577021f12b
resolve some comments
5 years ago
9e264fedc9
Updates
...
* preserve *all* of `create`
* don't preserve `notifications` or `algorithm`, and add some justifcation.
5 years ago
887cd5e7d0
I really hope someone doesn't invest none-hash
5 years ago
0444c8016b
review comments
5 years ago
4503327450
Add some compatibility hacks.
5 years ago
d324cac847
preserve powerlevel
5 years ago
b49a950245
Update proposals/2176-update-redaction-rules.md
...
fix typo
Co-Authored-By: Kitsune Ral <Kitsune-Ral@users.sf.net>
5 years ago
9ebcff5758
fix typo, add section on html details element
5 years ago
36cb8ed894
none -> m.none
5 years ago
1f786ae6dc
commit image into repo, fix typo
5 years ago
d9269b084f
Exclude pubkey endpoints from auth
5 years ago
a1de6ff634
Hopefully clarify some bits
5 years ago
cd5549d483
Proposal to update the redaction algorithm
5 years ago
b09d48a9f7
Spec link
5 years ago
78d46b2890
Proposal to move the `redacts` key to a sane place
5 years ago
25a47afa32
unnecessary capital mk. 2
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
6e061b1baf
unnecessary capital
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
f474b31f5f
typo
...
Co-Authored-By: J. Ryan Stinnett <jryans@gmail.com>
5 years ago
3514437d24
Ability for client/server to decide on no hashing
5 years ago
9bb6ad80d1
typo
5 years ago
ed67e26037
pepper must not be an empty string, append medium
5 years ago
1963a24832
fix attacks paragraph
5 years ago
dd8a6549c9
Address review comments
5 years ago
701d340da1
Remove exception for request/submitToken
5 years ago
bf8a1e5d5f
Add way to get the HS to bind/unbind existing 3pids
5 years ago
3702669424
update from comments
5 years ago
30dcc28f9b
try & clarify that HS signature isn't the only acceptable auth for unbind
5 years ago
f4a1e02884
simple method once more
5 years ago
4d31ddc8c9
additions and clarifications
...
- indicate how to use MSC 1946 to store/share private keys
- add signing by devices to enable migrating from device verifications
- add information about signature upload failures and M_INVALID_SIGNATURE code
- add security consideration
5 years ago
53bd384f2e
Clarify salting
5 years ago
3aaf181db2
rename some things and add clarification
5 years ago
1a669348d8
http status code
5 years ago
d15c9df115
fullstop
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
e28f7aad72
slash
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
4c72c37b80
slash
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
10858bf83b
set account data after registration
5 years ago
79dbad2914
remove acceptance token mention
5 years ago
ac6b9bdb7c
s/deprecate/remove/
5 years ago
7f65364804
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
03e6ab0103
re-word double openid
5 years ago
d00dfb7822
exclude submittoken too
5 years ago
f02e4c2e9c
both registers are excluded from auth
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
5374030cc0
Drop application/x-form-www-urlencoded in v2
5 years ago
2d11217d4e
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
8af35be13f
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
922a20ba26
small fixes
5 years ago
6f81d3774b
New hashing method
5 years ago
fe14d3c9f0
Spec terms response
5 years ago
786d5bc281
rewrite UI auth tradeoffs
5 years ago
45d630951c
back to M_TERMS_NOT_SIGNED
5 years ago
83bb3861ba
line wrap
5 years ago
8897ea4bb1
Merge branch 'master' into travis/msc/integrations/discovery
5 years ago
a2a7b7ff13
Merge branch 'master' into travis/msc/integrations/auth
5 years ago
bfd8e52c23
Formatting
5 years ago
d8283b9cdf
Add option to use query string
5 years ago
e80753e56c
Add .well-known discovery
5 years ago
4be283ccb3
Typing
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
5 years ago
f95197b422
make the many-anded sentence a list
5 years ago
10a6a59a12
Deprecate `bind_email` / `bind_msisdn`
5 years ago
b5326de1c4
Exclude requestToken endpoints from auth requirement
5 years ago
540aab82a1
accidentally formatted the wrong entry
5 years ago
6260871a21
spoiler fallback to uploaded media
5 years ago
21b9eaf8de
No custom HTTP headers
...
Use the obvious way: in the same place as the ID server address
6 years ago
2694bb1090
Add really horrible custom HTTP header
...
for giving the IS token to the HS
6 years ago
58cf083a6a
backwards compat
6 years ago
6273868323
Clarify v1 API deprecation
6 years ago
4edf826c93
Capitalise on our identifiers
6 years ago
ba7047ce77
Clarify we must be accepting HS auth
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
1d75828c71
Clarify what to do if no (new) docs
6 years ago
af691b5a8a
Clarify this applies to 2134
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
57094276ce
Typing hard is
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
7549c5dd76
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
6 years ago
0fd4fe2542
Add algo/pepper to err resp
6 years ago
dfb37fcce1
update with feedback
6 years ago
df88b13ce1
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
6 years ago
9e0d8b9cb2
Use M_CONSENT_NOT_GIVEN
...
No idea where I got the other one from: we already have one in the
spec, so use it.
6 years ago
0dae2d5812
GET terms must be unauthed.
...
Detail process for new auth (don't register until consent given).
Specifically mention the authentication header.
6 years ago
4f83cc1c24
moved client spoiler conversion to potential issues
6 years ago
6f374dc981
Re-write for OpenID auth
6 years ago
2c09580e27
line wrap
6 years ago
96e43aaf45
Define what characters lookup_pepper can consist of
6 years ago
f951f312e1
Fix terrible wording
6 years ago
fae6883cc0
Update with review comments
6 years ago
0a4c83ddb9
no plural. 3pid -> 3PID
6 years ago
36a35a33cc
Clarify how the spec defines hashing algs
6 years ago
ee10576d60
Update with feedback
6 years ago
abb407145a
HS docs must be added too
...
also, unbind must not error when called by HSes and proxy terms token
6 years ago
8ae47557c9
s/Third Party/Accepted/
6 years ago
2555801458
m.third_party_terms -> m.accepted_terms
...
as it will have the HS's terms too
6 years ago
4ba9b2a599
perfix
6 years ago
a63e4420eb
Linkify
...
Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
6 years ago
02ac0f3b33
Give the user control!
6 years ago
acdb2b1b42
Merge branch 'hs/hash-identity' of github.com:matrix-org/matrix-doc into hs/hash-identity
6 years ago
e3ff80291f
http err codes and hash wording fixes
6 years ago
21e93a123e
Naming and capitalization
6 years ago
53f025edfc
Specify optional pepper rotation period
6 years ago
2383a55720
404 for deprecated endpoint
6 years ago
c63edc7b97
Clean up wording around peppers and hashes
6 years ago
e3b2ad38b5
pepper -> lookup_pepper
6 years ago
1fea604ba9
Don't define error message
6 years ago
9ca3ccc81c
Add requirments section for de-duping between services.
6 years ago
d4ca0c237a
Specify ID grammar and add comma
6 years ago
276e2b6843
Typo
...
Co-Authored-By: Travis Ralston <travpc@gmail.com>
6 years ago
cf48030d1f
One more tradeoff
6 years ago
32c7fc638d
you have a number now
6 years ago
23af87e9fc
Proposal for IS & IM TOS API
6 years ago
1343e19a6d
Specify hash algorithm and fallback considerations
6 years ago
f28476f0f3
line wrap and fix wording
6 years ago
3ee27d3818
salt->pepper. 1 pepper/is. add multi-hash idea
6 years ago
f41ed02c9e
remove sec concerns
6 years ago
6bb4a9e911
Add per-is salt consideration
6 years ago
5049e552e7
Drop /api from the new endpoint
6 years ago
bc9b6c3659
Add salt to example and signal link
6 years ago
063b9f60e0
Require a salt to defend against rainbow tables
6 years ago
d2b47a585d
Allow for changing the hashing algo and add at-rest details
6 years ago
f8dbf2b360
Update proposals/2134-identity-hash-lookup.md
...
Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
6 years ago
12431f1a4e
Base64 potential issue
6 years ago
8b92df74ab
s/medium/address
6 years ago
a8c26d208b
Wrap
6 years ago
3eff76b00a
MSC 2134
6 years ago
26349417ba
update spoiler render idea
6 years ago
fc1d8f184d
Merge pull request #2078 from matrix-org/anoa/msc2078
...
MSC2078: Sending Third-Party Request Tokens via the Homeserver
6 years ago
65c3935419
Merge pull request #2076 from matrix-org/rav/proposal/enforce_key_validity_periods
...
MSC2076: Enforce key-validity periods when validating event signatures
6 years ago
19575eb4d4
Merge pull request #2077 from matrix-org/rav/proposal/room_v5
...
MSC2077: room v5
6 years ago
950415c72a
Merge branch 'master' into matthew/msc1779
6 years ago
be568ba9ab
link to the legalified version of MSC1779
6 years ago
9cf03325b9
Merge pull request #2046 from matrix-org/travis/1.0/msc1915-unbind
...
Spec 3PID unbind API
6 years ago
45e271c0f7
be super explicit
6 years ago
7f65704ebc
Update wording and answer review comments
6 years ago
3e23dde341
Be clear that any 3PID token request can now be done by the hs
6 years ago
9000247008
Merge branch 'anoa/msc2078' of github.com:matrix-org/matrix-doc into anoa/msc2078
...
* 'anoa/msc2078' of github.com:matrix-org/matrix-doc:
Update proposals/2078-homeserver-password-resets.md
6 years ago
d3f21e0360
Address review comments
6 years ago
e49518099d
Be explicit with request/responses
6 years ago
395acf8e06
Update proposals/2078-homeserver-password-resets.md
...
Co-Authored-By: Hubert Chathi <hubert@uhoreg.ca>
6 years ago
6bb48723e8
The HS can send any URL
6 years ago
6e0af5e64c
If no submit_url, just send it to the IS as before
6 years ago
4174b61279
submit_url only if the user has to enter the code somewhere
6 years ago
8259ae292a
Capitalise SMS
6 years ago
7e18c5d5a8
Add new submit_url response field
6 years ago
8cba7adcdf
Clarify conditions for attack
6 years ago
085c5667a4
wrap lines
6 years ago
1956f1a916
Revert "Remove attacker bit"
...
This reverts commit c9711acbc5
6 years ago
c9711acbc5
Remove attacker bit
6 years ago
4e692735f5
Update some wording
6 years ago
cf932ad4f8
msc2078 - proposal for homeservers sending passwords reset requests
6 years ago
40b10f254b
clarifications
6 years ago
3347a480eb
fix typo
6 years ago
d2ccd6b268
MSC2077: room v5
6 years ago
37b1e171fc
MSC2076: Enforce key-validity periods when validating event signatures
6 years ago
b92b147797
Merge pull request #1719 from uhoreg/olm_unwedging
...
MSC1719: olm session unwedging
6 years ago
fee2ebf682
fix typo
...
Co-Authored-By: Shamil K <me@noteness.in>
6 years ago
dda7afa845
Merge pull request #1717 from uhoreg/e2e_verification
...
MSC1717: common definitions for key verification methods
6 years ago
da5ce919f2
add sharing secrets, and a bunch of cleanups
6 years ago
6929579360
add some clarifications
6 years ago
ffb70a2fab
fix typo
...
Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
6 years ago
84f0d9d7e4
add clarification
6 years ago
0463084924
Spec 3PID unbind API
...
As per [MSC1915](https://github.com/matrix-org/matrix-doc/pull/1915 )
Implementation proof:
* https://github.com/matrix-org/synapse/pull/4982
* https://github.com/matrix-org/sydent/pull/160
The only alteration made which differs from the proposal is clarity on how to handle homeservers not knowing the `id_server`. All other differences are unintentional.
6 years ago
ac08c84612
remove duplicate consideration
...
Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
6 years ago
dd74baa5d0
clarify wording
6 years ago
d39baba21b
add a security note
6 years ago
7705006260
1 hour seems to be fine
6 years ago
273af2a2e0
wrap long lines
6 years ago
6f3bcb56d3
add rendering idea
6 years ago
ebb1351a9f
linebreak consistency
6 years ago
d750115fdc
fix up some things
6 years ago
70d3fd809e
add spoiler msc
6 years ago
7bad359b0d
switch to the 3-key system, and some wording improvements
6 years ago
37871106c6
MSC2002: Proposal for adopting MSC1884 as v4 rooms ( #2002 )
6 years ago
e71b3ac754
Add details to what an unrecognised request is
6 years ago
62748a026d
Rename 0000-leave-reasons.md to 1983-leave-reasons.md
6 years ago
97786da4ad
Create 0000-leave-reasons.md
6 years ago
c1721cb6f7
Merge branch 'master' into babolivier/standardised-federation-response-format
6 years ago
661d69858e
Add fallback
6 years ago
2ae122903f
Use the right name
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
c230c2fd2f
Merge pull request #1967 from aqtusia/master
...
Replace /bind with /3pid/bind
6 years ago
5792e5f4de
Merge pull request #1954 from matrix-org/neilj/Remove-prev_content-from-the-essential-keys-list2
...
MSC1954: Proposal to remove prev_content from the essential keys list
6 years ago
911fb94ea0
typos
6 years ago
2eb9708f7f
Replace /unbind with /3pid/unbind
6 years ago
b41fbc86b6
add further potential issues and security concerns
6 years ago
0bab70c14e
Assign MSC number
6 years ago
d6d0f9780d
Proposal for basic integration manager authentication APIs
6 years ago
b12e92440e
Merge pull request #1930 from matrix-org/travis/msc/tombstone-notif
...
MSC1930: Add a push rule for m.room.tombstone events
6 years ago
cecf75c9a9
Merge pull request #1884 from matrix-org/rav/proposal/no_slash_in_event_id
...
MSC1884: Proposal to replace slashes in event IDs
6 years ago
13d63685d3
Spelling
...
Co-Authored-By: turt2live <travpc@gmail.com>
6 years ago
2dcda7d564
Add a mention that clients should re-query .well-known
6 years ago
dffe19bb76
Rename file to match MSC number
6 years ago
cc10444d4b
Assign MSC number
6 years ago
29a9982447
Proposal for integration manager discovery
6 years ago
99cd064f26
Update original MSC as per proposal guidelines
6 years ago
743eeca27a
MSC to remove prev_content from the essential keys list
6 years ago
efcbf2f807
Merge branch 'master' into matthew/msc1779
6 years ago
88f533f0db
incorporate further feedback
6 years ago
417f3a3e8b
incorporate further feedback from vdh
6 years ago
9dcf2d6a28
Update proposals/1884-replace-slashes-in-event_ids.md
...
Co-Authored-By: ara4n <matthew@arasphere.net>
6 years ago
207d6cf851
update MSC1884 to reflect new conclusions following discussion on the PR
6 years ago
979827bad3
rename to match MSC number
6 years ago
63c6d030fd
draft of secure server-side storage
6 years ago
4e95f8062a
add examples for federation endpoints
6 years ago
696e568fb2
add some clarifications
6 years ago
410a5dbbff
Update proposals/1915-unbind-identity-server-param.md
...
Co-Authored-By: erikjohnston <erikj@jki.re>
6 years ago
bd4fab7a15
Be more explicit identity server selection and errors
6 years ago
0e07a6d243
Proposal to have a push rule for m.room.tombstone events
6 years ago
1c4262e556
Apply suggestions from code review
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
87824c1c96
Update proposals/1219-storing-megolm-keys-serverside.md
...
Co-Authored-By: uhoreg <hubert@uhoreg.ca>
6 years ago
1749a91344
make MSC mentions into links
6 years ago
4842a718d8
fill in some of the other sections
6 years ago
f9a00fc943
clarify that not understanding a verification method should not auto-cancel
6 years ago
60f1cf79de
Update wording and add deactivate account API
6 years ago
77110b46df
Update proposals/1915-unbind-identity-server-param.md
...
Co-Authored-By: erikjohnston <erikj@jki.re>
6 years ago
ee6513d608
Add alternative sid/client_secret authentication
6 years ago
f92925ed45
Add a 3PID unbind API
6 years ago
82258fc0fc
Proposal for changing event ids. Again.
6 years ago
ca7aa8b0ba
fill in more details, including federation bits
6 years ago
7eb8b5d7f3
Add proposal for invite error code
6 years ago
0051c6a377
Key backup: Return {hash, count} for key upload requests
...
This is this tuple that allows the client to check if it has locally all keys of the backup
6 years ago
Andrew Morgan