3 ms·
Matrix servers still control group membership, and probably will for a while (ie, months). The vulnerabilities that allowed such users and devices to steal key
by cvwright 4y ago
Matrix servers still control group membership, and probably will for a while (ie, months).
The vulnerabilities that allowed such users and devices to steal keys have been fixed.
- tptacek 4y agoControl of group membership in Matrix is control of key distribution. That's generally how group secure messaging works. The vulnerabilities didn't allow unauthorized group messengers to "steal" keys; it added unauthorized members to groups, which causes authorized group members to negotiate key relationships with them.