Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Remove email delegation support #9762

Closed
richvdh opened this issue Apr 7, 2021 · 1 comment
Closed

Remove email delegation support #9762

richvdh opened this issue Apr 7, 2021 · 1 comment

Comments

@richvdh
Copy link
Member

richvdh commented Apr 7, 2021

Back in Synapse 1.4, we gave Synapse the ability to send its own emails for email address validation, but left in the option to delegate this behaviour to an identity server.

Doing delegation in that way is strongly discouraged (for one thing: it allows a malicious/compromised IS to take over HS accounts), and relies on deprecated features of the identity server. I think we should remove this delegation.

@richvdh
Copy link
Member Author

richvdh commented Apr 7, 2021

dup #5881

@richvdh richvdh closed this as completed Apr 7, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant