29 Aug 2024 |
Half-Shot | it's also (hopefully) going to be a relatively short transition period 🤞 | 16:18:19 |
MTRNord (they/them) | In reply to @Half-Shot:half-shot.uk it's also (hopefully) going to be a relatively short transition period 🤞 having used tech for years I am fairly sure this takes much longer than anyone plans :D | 16:18:46 |
MTRNord (they/them) | and there is nothing we can do about that | 16:18:59 |
Half-Shot | at least the upgrade path to supporting auth media is fairly straightfoward, so hopefully we won't see too many mismatch errors | 16:19:03 |
f0x | mhh, I guess projects like mine and matrix-media-repo are the only ones with more work, cause we didn't have to touch any of the signed federation stuff before | 16:23:32 |
Ricardo Duarte | In reply to @f0x:pixie.town mhh, I guess projects like mine and matrix-media-repo are the only ones with more work, cause we didn't have to touch any of the signed federation stuff before you mean the matrix-media-proxy ? | 16:24:08 |
Ricardo Duarte | I think Conduit, Conduwuit, Dendrite (not sure here), Grapevine and others supporting media will require work as well. | 16:24:40 |
f0x | sure, but a homeserver implementation already has everything in place for fetching keys, verifying signatures, signing requests | 16:25:42 |
TravisR | fwiw, MMR's code on this is https://github.com/t2bot/matrix-media-repo/blob/main/matrix/requests_signing.go and https://github.com/t2bot/matrix-media-repo/blob/main/matrix/xmatrix.go (noting https://github.com/t2bot/matrix-media-repo/issues/609 as a silly bug that shouldn't have existed) | 16:27:33 |
| LDA changed their display name from LDA [project starting ~September] to LDA [my kobashi coming soon...]. | 16:27:34 |
TravisR | it's not a ton of infrastructure, but it is more than zero | 16:27:51 |
f0x | hah, I considered not using a library for the auth header parsing because it might've been overkill, but now I'm glad I did :) | 16:32:02 |
f0x | https://www.npmjs.com/package/auth-header to "Deal with obscene HTTP Authorization and WWW-Authenticate headers." | 16:32:26 |
Cat | In reply to @travis:t2l.io matrix.org (non-beta) will be enacting its freeze on September 4th, 2024, which is 6 days away. Any information on when it’s generally recommended to freeze as a default configuration assuming that opt out is easy? Match m.org or separate later date? | 23:45:52 |
30 Aug 2024 |
TravisR | It'll be up to the individual servers - it's hard for us to recommend a specific date for everyone. | 01:04:49 |
TravisR | t2bot.io may not do it on September 4th, for example. | 01:05:03 |
Cat | And when does synapse plan to change its default then as that is one benchmark then | 01:08:43 |
TravisR | that is currently undecided. | 02:21:53 |
MTRNord (they/them) | In reply to @cat:feline.support Any information on when it’s generally recommended to freeze as a default configuration assuming that opt out is easy? Match m.org or separate later date? I guess lots of people will Match it since mit being able to see any matrix.org Media probably is an issue for people | 06:29:44 |
morguldir | freezing doesn't affect whether you can see remote media or not | 06:31:07 |