summary refs log tree commit diff
diff options
context:
space:
mode:
authorMatthew Hodgson <matthew@matrix.org>2014-09-04 02:35:18 +0100
committerMatthew Hodgson <matthew@matrix.org>2014-09-04 02:35:18 +0100
commit3b38d2f50789fc69bdd6249683ca5922c3c342b9 (patch)
treef4ab95d39f707fa52083ad79c3f6d123fcb07d54
parenttarget live site (diff)
downloadsynapse-3b38d2f50789fc69bdd6249683ca5922c3c342b9.tar.xz
big warning
-rw-r--r--README.rst17
1 files changed, 17 insertions, 0 deletions
diff --git a/README.rst b/README.rst
index 9ae870e4c7..6791e686b7 100644
--- a/README.rst
+++ b/README.rst
@@ -17,6 +17,23 @@ The overall architecture is::
       client <----> homeserver <=====================> homeserver <----> client
              https://somewhere.org/_matrix      https://elsewhere.net/_matrix
 
+WARNING
+=======
+
+**Synapse is currently in a state of rapid development, and not all features are yet functional.
+Critically, some security features are still in development, which means Synapse can *not*
+be considered secure or reliable at this point.**  For instance:
+
+- **SSL Certificates used by server-server federation are not yet validated.**
+- **Room permissions are not yet enforced on traffic received via federation.**
+- **Homeservers do not yet cryptographically sign their events to avoid tampering**
+- Default configuration provides open signup to the service from the internet
+
+Despite this, we believe Synapse is more than useful as a way for experimenting and
+exploring Synapse, and the missing features will land shortly.  **Until then, please do *NOT*
+use Synapse for any remotely important or secure communication.**
+
+
 Quick Start
 ===========