Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-02-27 16:33:44 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse source 
Co-Authored-By: Matthew Hodgson <matthew@arasphere.net>
This commit is contained in:
Hubert Chathi 2019-11-20 11:48:36 -05:00 committed by GitHub
parent 3e42cf528b
commit 3b2f897c7e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
proposals/1756-cross-signing.md
View file

@ -69,11 +69,11 @@ keys, respectively.
Currently, users will only be allowed to see Currently, users will only be allowed to see
* signatures made by their own master, self-signing or user-signing keys, * signatures made by their own master, self-signing or user-signing keys,
* signatures made by their own devices about their own master key, * signatures made by their own devices about their own master key,
* signatures made by other users' self-signing keys about the other users' own * signatures made by other users' self-signing keys about their own respective
devices, devices,
* signatures made by other users' master keys about the other users' * signatures made by other users' master keys about their respective
self-signing key, or self-signing key, or
* signatures made by other users' devices about the other users' master keys. * signatures made by other users' devices about their respective master keys.
This is done in order to preserve the privacy of social connections. Future This is done in order to preserve the privacy of social connections. Future
proposals may define mechanisms for distributing signatures to other users in proposals may define mechanisms for distributing signatures to other users in
@ -84,7 +84,7 @@ order to allow for other web-of-trust use cases.
Users who have verified individual devices may wish to migrate these Users who have verified individual devices may wish to migrate these
verifications to use cross-signing instead. In order to aid with this, verifications to use cross-signing instead. In order to aid with this,
signatures of a user's master key, made by their own devices, may be uploaded signatures of a user's master key, made by their own devices, may be uploaded
to the server. If another client sees that the user's master key has a valid to the server. If another user's client sees that that a given user's master key has a valid
signature from a device that was previously verified, then the client may signature from a device that was previously verified, then the client may
choose to trust and sign the master key. The client should take precautions to choose to trust and sign the master key. The client should take precautions to
ensure that a stolen device cannot be used to cause it to trust a malicious ensure that a stolen device cannot be used to cause it to trust a malicious