Skip to content

Commit

Permalink
Explain how currently HS can restrict client used
Browse files Browse the repository at this point in the history
  • Loading branch information
sandhose committed Mar 5, 2025
1 parent 559762d commit 6f74515
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions proposals/3861-next-generation-auth.md
Original file line number Diff line number Diff line change
Expand Up @@ -153,9 +153,8 @@ This usually implies a contractual relationship between the service provider and

This has been a notorious problem with [OAuth 2.0 in email protocols][thunderbird-oauth2], where email clients are forced to register their applications with each email provider, giving the email provider the right to reject any application.

The goal of this proposal is to keep the ecosystem open by clearly defining how clients register themselves dynamically with the homeserver.
This won't prevent the homeserver from rejecting clients arbitrarily, but this was already the case with UIA.
On the contrary, this proposal will provide homeserver operators greater visibility into which clients are being used, helping with decisions to approve third-party clients.
The goal of this proposal is to keep the ecosystem open by clearly defining how clients dynamically register themselves with the homeserver.
While this won't prevent a homeserver from arbitrarily rejecting clients (which is already possible with UIA based on the client's user-agent string or redirect URI, for example), this proposal will provide homeserver operators greater visibility into which clients are being used, aiding decisions to approve third-party clients.

[thunderbird-oauth2]: https://wiki.mozilla.org/Thunderbird:Autoconfiguration:ConfigFileFormat#OAuth2

Expand Down

0 comments on commit 6f74515

Please sign in to comment.