Comment Comment by driminicus We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do) parent driminicus 5 years ago
Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do)