4 ms·
We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262 https://github.com/matrix-org/
by driminicus 5y ago
We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262 https://github.com/matrix-org/matrix-doc/pull/3262
Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do)
- detaro 5y ago> (And also clients still need the plaintext password at least client-side no matter what we do) Are matrix devs seriously not aware of what OAuth is and does? That is ... concerning.
- driminicus 5y agoMatrix does actually support OAuth (in fact, the mozilla.org matrix server can only be logged in to through OAuth)