Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable "ask every time" by default #294

Open
Zocker1999NET opened this issue Nov 22, 2022 · 0 comments · May be fixed by #295
Open

Enable "ask every time" by default #294

Zocker1999NET opened this issue Nov 22, 2022 · 0 comments · May be fixed by #295

Comments

@Zocker1999NET
Copy link
Contributor

Requested Change

Either enable "ask every time" by default or replace it with its opposite.

Reasoning

Many users may just click on continue without realizing that the selected Matrix server will receive all preview requests in the future (or until the). If that first one is not their own home server, this may result in an unnecessary leak of user data. (e.g. first I preview a user on malicious.matrix.example and accept previews there (more for this one case) and then preview users which are on other.matrix.example, the malicious one will not only know my IP but also know which user I wanted to write with).

Selecting this preview server should be an action which requires explicit agreement with knowing the consequences and not just "yeah, I want to preview this users image of course by asking his home server, why do you even ask".
This is not just my opinion but a requirement of the GDPR in the EU.

Zocker1999NET added a commit to Zocker1999NET/matrix.to that referenced this issue Nov 22, 2022
Zocker1999NET added a commit to Zocker1999NET/matrix.to that referenced this issue Nov 22, 2022
@Zocker1999NET Zocker1999NET linked a pull request Nov 22, 2022 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant