From 282659c27dfd93fdb090c759d0bb279edf08a429 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20Christian=20Gr=C3=BCnhage?= Date: Tue, 7 Sep 2021 12:11:47 +0200 Subject: [PATCH] add proposal for adding the dest to federation auth headers --- proposals/3383-fed-auth-destination.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 proposals/3383-fed-auth-destination.md diff --git a/proposals/3383-fed-auth-destination.md b/proposals/3383-fed-auth-destination.md new file mode 100644 index 00000000000..62ae261fe17 --- /dev/null +++ b/proposals/3383-fed-auth-destination.md @@ -0,0 +1,19 @@ +# MSC3383: Include destination in X-Matrix Auth Header + +Currently, a federation request can't be validated mid-flight without talking to +both the originating server and the destination server. The originating server +needs to be asked for it's key, and the destination server for it's +`server_name`, because the `Host` header does not necessarily contain the +`server_name` of the destination server, if the delegation via `.well-known` is +being used. + +## Proposal + +## Potential issues + +## Alternatives + +## Security considerations + +## Unstable prefix +