MSC4163: Make ACLs apply to EDUs#4163
Conversation
Signed-off-by: Matthias Ahouansou <[email protected]>
There was a problem hiding this comment.
Implementation requirements:
- Server
There was a problem hiding this comment.
See server implementations in thread @ https://github.com/matrix-org/matrix-spec-proposals/pull/4163/files#r1667727322
…stead considering the origin to the event in practice this doesn't make a significant difference, due to the fact that servers should already be rejecting EDUs from servers which are not the same as the server of the user ID to prevent impersonation
|
I think this is pretty straightforward, has an implementation in conduwuit and makes sense from what ACLs are meant to do. @mscbot fcp merge |
|
Team member @mscbot has proposed to merge this. The next step is review by the rest of the tagged people: Concerns:
Once at least 75% of reviewers approve (and there are no outstanding concerns), this will enter its final comment period. If you spot a major issue that hasn't been raised at any point in this process, please speak up! See this document for information about what commands tagged team members can give me. |
turt2live
left a comment
There was a problem hiding this comment.
generally looks good to me, thank you!
|
@mscbot concern general clarity |
anoadragon453
left a comment
There was a problem hiding this comment.
Small wording nits. But otherwise this lgtm, thanks!
|
🔔 This is now entering its final comment period, as per the review above. 🔔 |
|
The final comment period, with a disposition to merge, as per the review above, is now complete. |
|
I haven't verified the implementation on this, but presumably someone has if it was accepted back in August. |
|
They do work, it was initially added to conduwuit as part of a moderation need and confirmed it stopped the problem since then. |
|
Spec PR: matrix-org/matrix-spec#2004 |
|
merged! |
Dendrite 0.15.0 is a security release supporting [room version 12](https://matrix.org/blog/2025/08/security-release/). It also added support for [MSC4163](matrix-org/matrix-spec-proposals#4163) and [MSC3967](matrix-org/matrix-spec-proposals#3967). Dendrite 0.15.1 and 2 are a bug fix releases on top of that. Full details can be found on dendrite's [changelog](https://github.com/element-hq/dendrite/blob/main/CHANGES.md).
Dendrite 0.15.0 is a security release supporting [room version 12](https://matrix.org/blog/2025/08/security-release/). It also added support for [MSC4163](matrix-org/matrix-spec-proposals#4163) and [MSC3967](matrix-org/matrix-spec-proposals#3967). Dendrite 0.15.1 and 2 are a bug fix releases on top of that. Full details can be found on dendrite's [changelog](https://github.com/element-hq/dendrite/blob/main/CHANGES.md). (cherry picked from commit ebcdb9c)
Rendered
Implementations:
Signed-off-by: Matthias Ahouansou [email protected]
FCP tickyboxes