are * to_device messages sent to all devices, or all /other/ devices?

matrix-org / matrix-spec

The Matrix protocol specification

Apache License 2.0

186 stars 94 forks source link

are * to_device messages sent to all devices, or all /other/ devices? #566

Open ara4n opened 4 years ago

ara4n commented 4 years ago

the spec is a bit unclear on whether devices should see echos of the wildcarded to-device messages that they send

jryans commented 4 years ago

@ara4n clear -> unclear I guess...?

ara4n commented 4 years ago

answer: yes, they are sent to all your devices. this is even exploited currently if you have Riot/Web open in two different browsers, as the two instances of the same device can use keyshare to gossip keys to one another.

The spec should be clarified.