Hacker News new | ask | show | jobs
by driminicus 1678 days ago
We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262

Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do)
1 comments
detaro 1678 days ago
> (And also clients still need the plaintext password at least client-side no matter what we do)

Are matrix devs seriously not aware of what OAuth is and does? That is ... concerning.

link
driminicus 1677 days ago
Matrix does actually support OAuth (in fact, the mozilla.org matrix server can only be logged in to through OAuth)
link