search

matrix-org / matrix.to

A simple stateless privacy-protecting URL redirecting service for Matrix
http://matrix.to
Apache License 2.0
893 stars 189 forks source link

Ability to remember your custom element instance #197

Open ara4n opened 3 years ago

ara4n commented 3 years ago

You can specify a default custom web instance via https://matrix.to/#/#misc:fosdem.org?web-instance[element.io]=chat.fosdem.org - but there's no way to tell matrix.to to override and use a specific preferred web instance if you've have one.

aaronraimist commented 3 years ago

Dup of https://github.com/matrix-org/matrix.to/issues/23

hex-m commented 3 years ago

There is an array of trusted Element-Web instances one can use. It should be easy to remove this whitelist. What is the reasoning for this restriction?

bwindels commented 2 years ago

There is an array of trusted Element-Web instances one can use. It should be easy to remove this whitelist. What is the reasoning for this restriction?

Prevent phishing attacks ... if people are used to trust matrix.to and Element, and get a link from somebody else linking to a malicious version of Element, they could be tricked into entering their credentials there. Currently we only allow Element instances managed by the authors of Element in there.

There might be a balance we could strike by giving a big fat warning (if not in the whitelist) in the UI saying "only use this version of Element if you trust <hostname of deployment>" or something ...

freaktechnik commented 2 years ago

What about allowing the client that /_matrix/client redirects to? (see https://github.com/matrix-org/synapse/blob/develop/docs/sample_config.yaml#L77-L85 )

bwindels commented 2 years ago

What about allowing the client that /_matrix/client redirects to? (see https://github.com/matrix-org/synapse/blob/develop/docs/sample_config.yaml#L77-L85 )

Oh, I didn't know about this. Of what homeserver though? The one in the room/user id shared? That could equally be malicious.

freaktechnik commented 2 years ago

Oh, I didn't know about this. Of what homeserver though? The one in the room/user id shared? That could equally be malicious.

Not sure how standardized it is, but this is what synapse offers: https://github.com/matrix-org/synapse/blob/develop/docs/sample_config.yaml#L77-L85

The user "selects" a homeserver for usage of matrix.to that is used to fetch room metadata. I think that defaults to matrix.org and you have to explicitly change it if you want something different.

pierreozoux commented 1 year ago

Hi!

I'm a bit new to matrix, and not sure if it is the right place to ask (you'll tell me if there is a better place to do so).

As a community, we use matrix/element as our main place to organize. On our website, we want people to easily join our community. (we are a french community).

As a community member, I go to the room settings to get the link to the room to share. For instance, we have a community around how to host free software at scale with kubernetes, and this is the link I would get: https://matrix.to/#/#libresh:liiib.re

Then, I share this link, and as a user, the experience is really complicated.

As a user, I receive a link to a chat app, and I want to click, have instruction in my own language, register if necessary, and join.

Currently I find the experience complicated for the end user wanting to join a chat room via link:

I have various questions: As an element hoster, how could I modify/configure element in such a way that when I share a room, the users are sent directly to our element?

I tried to create a link like: https://matrix.to/#/#libre.sh:liiib.re?web-instance[element.io]=element.liiib.re (It doesn't work for me) I checked https://github.com/matrix-org/synapse/blob/develop/docs/sample_config.yaml#L77-L85 but it seems the conf changed.

Let me know if it is not the right place to ask such questions! Thansk and have a nice day!

aaronraimist commented 1 year ago

As an element hoster, how could I modify/configure element in such a way that when I share a room, the users are sent directly to our element?

@pierreozoux Element has a permalink_prefix option which does what you are asking for https://github.com/vector-im/element-web/blob/develop/docs/config.md#customisation--branding

Let me know if it is not the right place to ask such questions! Thansk and have a nice day!

Generally for questions the best place to ask is the Matrix room for that thing, in this case #web:element.io

pierreozoux commented 1 year ago

@aaronraimist thanks a lot for the kind feedback and the answer, next time, I'll ask there. You can collapse my question as off topic if you feel like it (I can't)!

Cheers!