search

matrix-org / matrix-spec

The Matrix protocol specification
Apache License 2.0
197 stars 97 forks source link

Concept of blocking IP users (ban by IP). (SPEC-82) #55

Open matrixbot opened 9 years ago

matrixbot commented 9 years ago

I as a user XMPP, appreciate it for including anonymity, but XMPP has a problem with blocking. I do not understand why they were not smart enough to ban by ip but without disclosing it.

I suggest in Matrix make so:

  1. We can to ban the already known IP (obtained outside the Matrix).
  2. We can ban by IP, but the IP is not issued! You can show hash ­­– IP + salt. Salt should be become attached to the server, so that it was impossible to make some rainbow tables, and built not on the basis of the domain name, but rather on server hardware.
  3. Subnet ban as for me a very bad decision, but it can be done without disclosing IP (you can do a hash on every part of IP ­­– "solthash.solthash.solthash.solthash").
  4. Can make settings the server and/or rooms where specify display the IP or not, but when entering in such chatroom (which shows IP) should be a warning with confirmation for enter to the chatroom (this is important!). In addition possible in the account settings, add checkbox "not to enter the room where the displayed IP".

(Imported from https://matrix.org/jira/browse/SPEC-82)

(Reported by NightFox)

matrixbot commented 9 years ago

Links exported from Jira:

blocks SYN-62 blocks SYN-64 blocks SYN-63