search

sipb / uplink

SIPB's integrated chatroom project
GNU Affero General Public License v3.0
6 stars 1 forks source link

Make sure user list is not shared with other servers #33

Closed gabrc52 closed 1 year ago

gabrc52 commented 1 year ago

Because of federation, some info may be sent to other servers. Make sure we're comfortable with the config options. And for instance:

Important- before deploying: Make sure the list of users is not sent to other Matrix servers(!) Because it says somewhere you can’t undo this—once other homeservers have this, you can’t delete it. I think it says so in https://github.com/ma1uta/ma1sd or the parent repo.

So if we do use that repo, we should ensure that option doesn't leak the directory or something like that (although the directory is public, but also we don't want to leak people who have suppressed their info from there -- maybe even it could be based on that)

gabrc52 commented 1 year ago

I have not read the server-server spec but I'm pretty sure that doesn't happen