@@ -164,8 +164,10 @@ other, which is the exact behaviour we're trying to eliminate. Doing this
164
164
also helps backward compatibility, as explained in [ Backwards
165
165
compatibility] ( #backwards-compatibility ) .
166
166
167
- The ` id_server ` and ` id_access_token ` parameters are to be removed
168
- from all of the Client-Server API's ` requestToken ` endpoints. That is:
167
+ Either the homeserver itself or a service that the homeserver delegates to
168
+ should be handling the sending of validation messages, not a user-provided
169
+ server. Any mention of the homeserver being able to proxy to an identity
170
+ server in the below endpoint descriptions:
169
171
170
172
* [ POST /account/3pid/email/requestToken] ( https://matrix.org/docs/spec/client_server/r0.5.0#post-matrix-client-r0-account-3pid-email-requesttoken )
171
173
* [ POST /account/3pid/msisdn/requestToken] ( https://matrix.org/docs/spec/client_server/r0.5.0#post-matrix-client-r0-account-3pid-msisdn-requesttoken )
@@ -174,13 +176,10 @@ from all of the Client-Server API's `requestToken` endpoints. That is:
174
176
* [ POST /account/password/email/requestToken] ( https://matrix.org/docs/spec/client_server/r0.5.0#post-matrix-client-r0-account-password-email-requesttoken )
175
177
* [ POST /account/password/msisdn/requestToken] ( https://matrix.org/docs/spec/client_server/r0.5.0#post-matrix-client-r0-account-password-msisdn-requesttoken )
176
178
177
- Either the homeserver itself or a service that the homeserver delegates to
178
- should be handling the sending of validation messages, not a user-provided
179
- server. Any mention of the homeserver being able to proxy to an identity
180
- server in the above endpoint descriptions, as well as the text "It is
181
- imperative that the homeserver keep a list of trusted Identity Servers and
182
- only proxies to those that it trusts." is to be removed from all parts of the
183
- spec, as the homeserver should no longer need to trust any identity servers.
179
+ As well as the text "It is imperative that the homeserver keep a list of
180
+ trusted Identity Servers and only proxies to those that it trusts." is to be
181
+ removed from all parts of the spec, as the homeserver should no longer need
182
+ to trust any identity servers.
184
183
185
184
## Tradeoffs
186
185
0 commit comments