You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.
Back in Synapse 1.4, we gave Synapse the ability to send its own emails for email address validation, but left in the option to delegate this behaviour to an identity server.
Doing delegation in that way is strongly discouraged (for one thing: it allows a malicious/compromised IS to take over HS accounts), and relies on deprecated features of the identity server. I think we should remove this delegation.
The text was updated successfully, but these errors were encountered:
Back in Synapse 1.4, we gave Synapse the ability to send its own emails for email address validation, but left in the option to delegate this behaviour to an identity server.
Doing delegation in that way is strongly discouraged (for one thing: it allows a malicious/compromised IS to take over HS accounts), and relies on deprecated features of the identity server. I think we should remove this delegation.
The text was updated successfully, but these errors were encountered: