From 98898733f3f476943b13332ea7cfe6266ffbfa70 Mon Sep 17 00:00:00 2001 From: Johannes Marbach Date: Thu, 20 Mar 2025 11:36:18 +0100 Subject: [PATCH] Clarify the meaning of "public rooms" for presence Relates to: #633 Signed-off-by: Johannes Marbach --- content/client-server-api/modules/presence.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/content/client-server-api/modules/presence.md b/content/client-server-api/modules/presence.md index ba46b327..200d5614 100644 --- a/content/client-server-api/modules/presence.md +++ b/content/client-server-api/modules/presence.md @@ -68,5 +68,7 @@ will cause the server to automatically set their presence to `online`. #### Security considerations -Presence information is shared with all users who share a room with the -target user. In large public rooms this could be undesirable. +Presence information is published to all users who share a room with the +target user. If the target user is a member of a room with a `public` +[join rule](#mroomjoin_rules), any other user in the federation is +able to access the target user's presence. This could be undesirable.