Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How do we remove malicious remote aliases from being advertised in m.room.aliases for a room? (SPEC-335) #625

Closed
matrixbot opened this issue Jan 21, 2016 · 3 comments
Labels
client-server Client-Server API feature Suggestion for a significant extension which needs considerable consideration

Comments

@matrixbot
Copy link
Member

Submitted by @​irc_Arathorn:openmarket.com

(Imported from https://matrix.org/jira/browse/SPEC-335)

@matrixbot matrixbot changed the title How do we remove malicious remote aliases from being advertised in m.room.aliases for a room? How do we remove malicious remote aliases from being advertised in m.room.aliases for a room? (SPEC-335) Oct 31, 2016
@matrixbot matrixbot added spec-bug Something which is in the spec, but is wrong feature Suggestion for a significant extension which needs considerable consideration and removed spec-bug Something which is in the spec, but is wrong labels Nov 7, 2016
@turt2live turt2live added the client-server Client-Server API label Feb 6, 2019
@pakman
Copy link

pakman commented Oct 9, 2019

I found this in a public room - when I pointed this out, among the comments were: "if a room admin can't delete aliases created by other homeservers that would be... unfortunate". Is there any prospect of giving room admins some more control over how their rooms are presented on the local server?

Malicious-room-aliases2

@richvdh
Copy link
Member

richvdh commented Oct 10, 2019

MSC2261 is intended to help in this area, if we ever get time to work on it. See also MSC2260.

@richvdh
Copy link
Member

richvdh commented Jul 21, 2020

this was fixed by MSC2432

@richvdh richvdh closed this as completed Jul 21, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
client-server Client-Server API feature Suggestion for a significant extension which needs considerable consideration
Projects
None yet
Development

No branches or pull requests

4 participants