On: Matrix 1.0 – Are We Ready Yet?

[cetra3]

I would be interested in knowing whether anyone else has confirmed these accusations or created a writeup as to why the protocol is insecure.

[maxidorius → cetra3]

It also has very questionable choices towards respect of Privacy: https://github.com/matrix-org/synapse/issues/4540

[maxidorius → cetra3]

I can confirm. One of the write-ups I did: https://gist.github.com/maxidorius/b25769f1a89c8860b928babe7...

[Arathorn → maxidorius]

this write-up boils down to saying that servers that don't uphold server ACLs (server-bans) will leak messages from banned servers.

it's a feature, not a bug; if you want to deploy the nuclear option of a server-ban in a room, you also have to ban any other servers which don't know what a server-ban is.