diff options
author | Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> | 2022-05-04 16:41:40 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-05-04 16:41:40 +0100 |
commit | 332cce8dcf9c28314f568c290b57e98036a0e723 (patch) | |
tree | c9cc1cf8e377502fcaadbdf16e22393dc33c89e8 /docs | |
parent | Remove unstable/unspecced login types. (#12597) (diff) | |
download | synapse-332cce8dcf9c28314f568c290b57e98036a0e723.tar.xz |
Disable device name lookup over federation by default (#12616)
Diffstat (limited to 'docs')
-rw-r--r-- | docs/sample_config.yaml | 8 | ||||
-rw-r--r-- | docs/upgrade.md | 11 | ||||
-rw-r--r-- | docs/usage/configuration/config_documentation.md | 6 |
3 files changed, 18 insertions, 7 deletions
diff --git a/docs/sample_config.yaml b/docs/sample_config.yaml index 67184c6b1a..5eba0fcf3d 100644 --- a/docs/sample_config.yaml +++ b/docs/sample_config.yaml @@ -709,11 +709,11 @@ retention: # #allow_profile_lookup_over_federation: false -# Uncomment to disable device display name lookup over federation. By default, the -# Federation API allows other homeservers to obtain device display names of any user -# on this homeserver. Defaults to 'true'. +# Uncomment to allow device display name lookup over federation. By default, the +# Federation API prevents other homeservers from obtaining the display names of +# user devices on this homeserver. Defaults to 'false'. # -#allow_device_name_lookup_over_federation: false +#allow_device_name_lookup_over_federation: true ## Caching ## diff --git a/docs/upgrade.md b/docs/upgrade.md index 3a8aeb0395..b40cac86f0 100644 --- a/docs/upgrade.md +++ b/docs/upgrade.md @@ -89,6 +89,17 @@ process, for example: dpkg -i matrix-synapse-py3_1.3.0+stretch1_amd64.deb ``` +# Upgrading to v1.59.0 + +## Device name lookup over federation has been disabled by default + +The names of user devices are no longer visible to users on other homeservers by default. +Device IDs are unaffected, as these are necessary to facilitate end-to-end encryption. + +To re-enable this functionality, set the +[`allow_device_name_lookup_over_federation`](https://matrix-org.github.io/synapse/v1.59/usage/configuration/config_documentation.html#federation) +homeserver config option to `true`. + # Upgrading to v1.58.0 ## Groups/communities feature has been disabled by default diff --git a/docs/usage/configuration/config_documentation.md b/docs/usage/configuration/config_documentation.md index 968b0fbfaf..36db649467 100644 --- a/docs/usage/configuration/config_documentation.md +++ b/docs/usage/configuration/config_documentation.md @@ -1035,13 +1035,13 @@ allow_profile_lookup_over_federation: false --- Config option: `allow_device_name_lookup_over_federation` -Set this option to false to disable device display name lookup over federation. By default, the -Federation API allows other homeservers to obtain device display names of any user +Set this option to true to allow device display name lookup over federation. By default, the +Federation API prevents other homeservers from obtaining the display names of any user devices on this homeserver. Example configuration: ```yaml -allow_device_name_lookup_over_federation: false +allow_device_name_lookup_over_federation: true ``` --- ## Caching ## |