ruwuma/ruma-signatures/CHANGELOG.md
gnieto 0635b40729
Verify only the required signatures on verify_event (#394)
The spec says that the required signatures for a signed event is the
signature of sender's server (unless is a third party invite) and the
`event_id` server (in v1 and v2 room versions).

This changes the previous behaviour, which tried to verify the
signatures for all the servers in the `PublicKeyMap`, instead of
checking only the required signatures.

Relevant spec section:
https://matrix.org/docs/spec/server_server/r0.1.4#validating-hashes-and-signatures-on-received-events
2021-01-18 23:21:47 +01:00

250 B

0.6.0 (unreleased)

Breaking changes:

  • Remove Copy implementation for Algorithm
  • Remove Copy and Clone implementations for Ed25519Verifier
  • Upgrade ruma-identifiers

Bug fixes:

  • Verify only the required signatures on verify_event