Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Stop hardcoding trust of old matrix.org key #5374

Merged
merged 2 commits into from Jun 6, 2019

Commits on Jun 6, 2019

  1. Stop hardcoding trust of old matrix.org key

    There are a few changes going on here:
    
    * We make checking the signature on a key server response optional: if no
      verify_keys are specified, we trust to TLS to validate the connection.
    
    * We change the default config so that it does not require responses to be
      signed by the old key.
    
    * We replace the old 'perspectives' config with 'trusted_key_servers', which
      is also formatted slightly differently.
    
    * We emit a warning to the logs every time we trust a key server response
      signed by the old key.
    richvdh committed Jun 6, 2019
    Copy the full SHA
    3ef1f62 View commit details
    Browse the repository at this point in the history
  2. clarify comment

    richvdh committed Jun 6, 2019
    Copy the full SHA
    de4c40c View commit details
    Browse the repository at this point in the history