top | item 20948745

(no title)

triodan | 6 years ago

Until Matrix/Riot resolves their problem of having a centralized identity server[0] I wouldn't recommend it.

[0]:https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8...

discuss

order

Arathorn|6 years ago

Matrix does not require a centralized identity server (which exists only for optionally discovering users on Matrix based on their email/phone numbers).

The linked gist is loudly complaining (amongst other things) that Riot's default config points at a centralised one by default.

We've already fixed this (https://github.com/vector-im/riot-web/issues/10553) by simply removing the concept of default identity servers entirely and instead prompting the user to select on demand whichever one they want to use, if they actually try to look up a user based on email/phone. It should be released in Riot 1.4 (on Web, and equivalent ones on mobile etc) in the coming weeks.

You can see our response to that original gist at https://matrix.org/blog/2019/06/30/tightening-up-privacy-in-..., and you can track progress over at https://vector-im.github.io/feature-dashboard/#/plan?label=p... (which has a cache from yesterday published at https://matrix.org/~matthew/privacy-sprint.html).

swalladge|6 years ago

Yeah that's true, if you wanted a private server a la mattermost/riot/slack, it wouldn't be ideal. However, I feel it's a decent tradeoff at present for what it's aiming for.