Skip to content

Commit b8ab3d0

Browse files
authored
Remove point about Element showing unexpected devices
1 parent 538ac09 commit b8ab3d0

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

proposals/2778-appservice-login.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -125,9 +125,6 @@ this is not a problem because:
125125
difference is that without a dedicated access token they are unable to receive device messages. While in theory this
126126
does make them unable to see encrypted messages, this is not designed to be a security mechanism.
127127

128-
- An appservice trying to log in as a user will always create a new device, which means the user would be informed of the
129-
new device on their existing sessions. It should be very obvious if a malicous appservice is creating new devices on your account.
130-
131128
In conclusion this MSC only automates the creation of new devices for users inside an AS namespace, which is something
132129
a server admin could already do. Appservices should always be treated with care and so with these facts in mind the MSC should
133130
be considered secure.

0 commit comments

Comments
 (0)