matrix-org / matrix-org/matrix-spec
Transfer room alias from one room to another
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 330
- Forks
- 150
- Avg merge
- 2h 21m
- Merged PRs (30d)
- 3
Description
There should be a way to directly transfer a roomAlias from one room to another.
Right now you have to delete it in one room and set it in another room, opening a small time frame for a potential attacker to steal the alias.
You could write a script to listen if one alias becomes available again and then steal it immediately if you want to, so it's not too hard to do this actually.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no file, test, or specification section. Start by locating the Matrix specification sections covering room aliases and alias ownership, then determine where transfer behavior and its security guarantees belong. Done means the protocol clearly defines transferring an alias between rooms without an exploitable unassigned interval.
Written by the indexing model from the issue text.
Assessment
- Domain
- backend-api-design
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100