search

kamax-matrix / mxisd

Federated Matrix Identity Server
GNU Affero General Public License v3.0
220 stars 112 forks source link

3pid unbind #184

Closed wabuMike closed 5 years ago

wabuMike commented 5 years ago

Since MSC1915 has now been added to spec, are the concerns expressed in mxisd-and-your-privacy still valid?

wabuMike commented 5 years ago

I'm asking, because in the logs there is this: Error M_FORBIDDEN: 3PID can only be removed via 3PID sessions, not via Homeserver signature.

wabuMike commented 5 years ago

Just found in your release notes that this should work. Am I missing anything else here? I'm running mxisd 1.4.5.

maxidorius commented 5 years ago

Yes the concerns are still valid: MSC1915 still allows to fallback to an Identity server that the client/user did not choose.

MSC1915 provides two ways to do a 3PID removal, and says the Identity Server can do it with either, without requiring both. This has been confirmed by Travis, a core team member.

Riot/synapse don't give you a choice in which to use - I can only suggest to open an issue on one of the repos, or on both, to offer both possibility to the user.