Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

If the default notary server is used, then warn on start up. #6088

Closed
neilisfragile opened this issue Sep 23, 2019 · 4 comments
Closed

If the default notary server is used, then warn on start up. #6088

neilisfragile opened this issue Sep 23, 2019 · 4 comments
Labels
A-Logging Synapse's logs (structured or otherwise). Not metrics.

Comments

@neilisfragile
Copy link
Contributor

Currently it is necessary for a homeserver to rely on a notary server to maintain a list of server keys across the federation.

Notary servers need to be stable and long lived, so the current default of 'matrix.org' is a good choice for most admins. However it is not immediately obvious to an admin that their server defaults in this way, and some admins will prefer to require another server be the notary.

Synapse should warn admins on start up that the notary is matrix.org unless perspectives or trusted_key_serversis not explicitly set in homeserver.yml

@neilisfragile neilisfragile added p1 A-Logging Synapse's logs (structured or otherwise). Not metrics. labels Sep 23, 2019
@neilisfragile
Copy link
Contributor Author

The log line should also make it clear that the software defined default will be removed in future as per #6087

@neilisfragile
Copy link
Contributor Author

neilisfragile commented Sep 23, 2019

  • add a warning to stderr if you're running on the hardcoded default (and mention that the default will be removed in future)
  • (re)add matrix.org as an explicit un-commented default in homeserver.yaml
  • add a warning to stderr if the config ends up using matrix.org and say "if you don't want to use matrix.org for this, please pick another long-lived reliable server instead"
  • add the suppress_notary_server_warning config option to get rid the warnings if you consciously don't care.

@neilisfragile neilisfragile reopened this Sep 23, 2019
@neilisfragile
Copy link
Contributor Author

#6090

@richvdh
Copy link
Member

richvdh commented Sep 26, 2019

resolved by #6090

@richvdh richvdh closed this as completed Sep 26, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
A-Logging Synapse's logs (structured or otherwise). Not metrics.
Projects
None yet
Development

No branches or pull requests

2 participants