-
-
Notifications
You must be signed in to change notification settings - Fork 234
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Handle bad SSL cert case w/ better error thrown to user or acting like Element #88
Labels
stale
The item is going to be closed soon because of inactivity
Comments
Closed
Closed
This issue is stale because it has been open for 120 days with no activity. |
github-actions
bot
added
the
stale
The item is going to be closed soon because of inactivity
label
Mar 7, 2024
This issue was closed because it has been inactive for 14 days since being marked as stale. |
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
A clear and concise description of what the issue is about.
When connecting to a Matrix server w/ a bad SSL cert wherein the domain names listed don't match the actual domain, FluffyChat throws an error about a "bad password" to the end user. This obfuscates info that a user could then take to the Homeserver admins to be acted on and can cause user frustration over entering the correct password multiple times. It instead should either handle the issue as Element does or otherwise throw an error about conflicting domains in the SSL cert to the user instead of bad password.
For example, someone may have the SSL cert for abc.social have the listed domain be matrix.abc.social instead of abc.social.
Element seems to be the outlier in ignoring(?) this cert conflict and connects users as NeoChat also currently has login issues for this case
To Reproduce
If this issue is describing a bug, include some steps to reproduce the behaviour.
Additional information:
/issue fluffy
The text was updated successfully, but these errors were encountered: