element-hq / element-hq/element-meta

Consider making the sender generate url previews, as with e2e thumbnails

Open
#1,139 2 comments 14 reactions 0 assignees View on GitHub
A-E2EE P2 T-Enhancement
Dominant language
No language data
Stars
112
Forks
25
Avg merge
6h 6m
Merged PRs (30d)
4

Description

### Description

Consider making the sender generate url previews. We are already trusting clients to faithfully generate thumbnails in e2e encrypted rooms anyway, so this is not a big jump in trust. Furthermore, someone who posts a link to malicious content under their control can already make the url preview say whatever they want, regardless of whether it is generated by a homeserver or sent directly.

On the plus side, it improves privacy, especially for single-user homeservers. It also improves
efficiency, as the site is only accessed once, rather than by every homeserver in the room, and reduces load on the servers.

### Steps to reproduce

- n/a

Log: not sent

### Version information
n/a

- **Platform**: any

For the web app:

- **Browser**: any
- **OS**: any
- **URL**: any

For the desktop app:

- **OS**: any
- **Version**: future

### Related

vector-im/element-meta#1138, vector-im/element-web#2084 and possibly also vector-im/element-web#1857

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.