Allow changing homeserver details without logging out #98
HarHarLinks
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
There are multiple scenarios:
I had to go through these, with a userbase larger than Me, Myself, and I.
From my experience, once you're logged into Element, the homeserver as either set or discovered on login, is saved and set in stone.
That means, your users need to re-log, re-sync, maybe use their e2e keys if not done correctly.
This could all be circumvented if the homeserver setting could be changed manually or "rediscovered".
I am not sure what security risk allowing to chang your homesever might open. Perhaps it is enough mitigation to only allow (sub) domains of the server part of your MXID.
It could also be rediscovered by reading the .well-known/matrix/client again, which should also be fairly secure, since again it's hosted on the domain that owns my server, as bound to my MXID.
Beta Was this translation helpful? Give feedback.
All reactions