The Matrix.org homeserver will see changes related to authentication in Q1 2025. The team will turn off guest account access on Matrix.org on January 16th and roll out Matrix Authentication Service (MAS) to embrace Matrix 2.0 after February 10. Client developers need to ensure their clients support the required changes.

🔗What is MAS

Matrix Authentication Service is Matrix's next-generation authentication stack. It allows for more flexible authentication journeys without requiring client developers to support every one of them.

You can find all the technical details in Quentin's Matrix Conf talk, Harder Better Faster Stronger Authentication with OpenID Connect.

🔗What's the impact

Client developers need to ensure that their projects support the requirements listed on areweoidcyet.com and, more precisely, the requirements listed in MSC3824.

Developers can already use beta.matrix.org to see if their clients are compatible with MAS. If you notice anything that doesn't work as intended, make sure to give your feedback on those MSCs. If clients work on beta.matrix.org, they will be able to connect to matrix.org after the rollout.

Homeserver administrators from the public federation don't have to worry about this deployment. MAS only affects the APIs between the clients and the server, so this deployment only impacts clients connecting to matrix.org. Federation APIs, used for servers to talk to each other, remain unchanged.

🔗Disabling guest accounts

Guest accounts are a legacy Matrix feature that allows clients to create temporary, limited technical accounts to participate in specific rooms that allow it.

The Matrix.org Foundation would have liked to find an efficient way to let people create guest accounts when joining a conversation and then turn them into fully fledged accounts later. Nobody in the ecosystem found resources to design and implement such a user journey, and guest accounts ended up being used for technical reasons, like displaying room previews or badges via shields.io.

Those accounts make up a significant load on the matrix.org homeserver. For that reason, the Matrix.org Foundation has decided to disable them at least temporarily to save precious resources and go ahead with the rollout of the new authentication stack.

The Matrix.org Foundation is open to re-enabling guests accounts once it has the financial capacity to support them. If guest accounts on matrix.org are important to you and your business, please join the Matrix.org Foundation as a supporting member to contribute to its financial sustainability.

We encourage developers using guest access for room information, such as topics, aliases, or member counts, to utilize the endpoint proposed by MSC3266. This endpoint is publicly accessible without authentication and can serve as an alternative resource until guest access is reinstated in a more robust form.

We appreciate your understanding as we take these steps to enhance the user experience on Matrix.org.

🔗Dept of Status of Matrix 🌡️

Matthew reports

The 2024 Matrix Holiday Special: https://matrix.org/blog/2024/12/25/the-matrix-holiday-special-2024/

🔗Dept of Clients 📱

🔗SchildiChat (website)

SchildiChat is a fork of Element for Android and Desktop, that used to focus on UI changes such as message bubbles and a unified chat list, but now also provides some additional tweaks and community-driven features that may not be on the roadmap for the upstream clients.

SpiritCroc says

Over the holidays, I added two new (old) features to SchildiChat Next (our Element X Android fork) that I've been missing since switching to the new codebase.

First, inline images and custom emotes are now rendered again, so you don't miss out when users on other clients or certain bridges send these. If you prefer not having images rendered in text message, you can also disable them via a setting, in order to render the fallback text instead - rather than not rendering anything at all as done previously.

Second, I added back the functionality to fetch and render previews for links found in text messages, so you have a better idea what to expect before clicking them. For now, this is an experimental setting, so remember to enable it first if you want to try it out once it lands in the next release.

Continue reading…

Hi all,

Once again we celebrate the end of another year with the traditional Matrix Holiday Special! (see also 2023, 2022, 2021, 2020, 2019, 2018, 2017, 2016 and 2015 just in case you missed them).

This year, it is an incredible relief to be able to sit down and write an update which is overwhelmingly positive - in stark contrast to the rather mixed bags of 2022 and 2023. This is not to say that things are perfect: most notably, The Matrix.org Foundation has not yet hit its funding goals, and urgently needs more organisations who depend on Matrix to join as members in order to be financially sustainable. However, in terms of progress of Matrix towards outperforming the centralised alternatives; growth of the ecosystem; the success of the first ever Matrix Conference; we couldn’t be happier - and hopefully the more Matrix matures, the more folks will want to join the Foundation to help fund it.

So, precisely why are we feeling so happy right now?

Continue reading…

🔗Matrix Live

🔗Dept of Status of Matrix 🌡️

🔗Community Year In Review 2024

Nico announces

So, how was your year? NO! DON'T TELL ME NOW! But read on!

Some might remember the year in review for 2023 or 2022, well, this year is still 2024 and I decided to do another one!

If you don't remember, here is the gist of it: It is a room, where you can post about what you did, experienced or otherwise found interesting in 2024. You can also give some predictions for 2025, if you are so bold! Then, on the 31st, I will compose those into a blog post and you can read what others had to say! Now, the exact dates are a bit muddy, last time I was late and there is no guarantee I won't be late this time, but you have until the 30st to compose something you want to share.

There are no exact restrictions on what projects can participate or that what you share has to be a project, but we try to ring out the year with positive vibes from the community in general. Please also try to look at the overall year, if you just want to report on the week, well, there is something called "This Week in Matrix" for that!

Now, you probably are asking the important question, where is that room? Well, you can guess it from last years alias, but for everyone else:

Join #year-in-2024:neko.dev!

Have a good one, merry christmas and see you next year!

Part time reporter, Nico

PS: If you want examples, check out https://blog.neko.dev/posts/matrix-year-in-review-2022.html or https://blog.neko.dev/posts/matrix-year-in-review-2023.html

Continue reading…

Hi all,

It’s been 6 months since the first ever Matrix Governing Board (GB) was formally elected & announced, and it has recently had its first official meeting. As such, we felt it was time that you, our constituents, had a report on how things are going and what we’ve been doing. We appreciate that the work of the GB is often in the background, and we want to be as transparent as we can.

Continue reading…

Hey all,

Another 9 MSCs have been released today in Matrix 1.13! It’s just over 2 months since Matrix 1.12 went out, and the last scheduled release for 2024 - the next release is planned for around FOSDEM 2025. Today’s release contains more T&S features and a number of clarifications and improvements. The full changelog is at the end of this post, per usual :)

Continue reading…

🔗Matrix Live

🔗Dept of Status of Matrix 🌡️

Matthew reports

Last week US Senators Wyden (D) and Schmitt (R) wrote an open letter to the US Department of Defense encouraging them to adopt Matrix more widely, rather than wasting money on unencrypted, centralised or closed systems. The letter also reveals a whole bunch of info at the end about the US Navy's Matrix deployments. This feels like a huge step change forwards - not only is the FBI encouraging citizens to use end-to-end-encryption in the wake of realisations that the public telephone network is insecure, but US Senate is pushing for Matrix adoption (without any lobbying from us, I hasten to add). You can read more about it at the Element blog (Element provides the deployments for the US Navy).

P.S. it really is bleakly amusing that we've been constantly pointing out that legislation like EU's ChatControl and the UK's Online Safety Act are catastrophically flawed because the surveillance backdoors they propose will be exploited and abused by attackers. And here we are, with the lawful intercept backdoors in the US public phone system being compromised by attackers, causing the FBI to recommend non-backdoored E2EE instead. We live in a very strange timeline.

Continue reading…

🔗Matrix Live - Social Login with MAS

🔗Dept of Status of Matrix 🌡️

🔗Welcoming Ercom as a Silver Member

Josh Simmons (m.org) says

We'd like to welcome Ercom as the newest Silver Member of the Matrix.org Foundation and are excited to announce a couple other new members before the end of the year 🚀

The Matrix.org Foundation stewards the Matrix protocol specification, facilitates open governance, and convenes the ecosystem. While Matrix continues growing in adoption, the Foundation's funding is not keeping pace. If your organization builds on Matrix and is invested in its future, the time to become a funding member is now.

🔗Matrix.org protocol is not MATRIX

Josh Simmons (m.org) announces

From the department of no-the-other-Matrix: This week saw news of Europol shutting down an encrypted messaging service called MATRIX. All indications are that this has nothing to do with the Matrix protocol, and we are grateful to the agencies and publications that have made an effort to disambiguate. We are, of course, monitoring the situation as more information becomes available.

Continue reading…

The Matrix.org Foundation has been made aware that an international investigative operation took down a service called MATRIX which was used by a cybercriminal network, which has no relationship with the Matrix.org Foundation or the Matrix protocol itself.

The takedown site has a Matrix-the-movie branding, which is a probable source of confusion. The app showcased doesn’t look like any of the Matrix clients we’re aware of.

In a statement to the Matrix.org Foundation, Europol confirmed that the MATRIX cybercriminal network and the Matrix protocol are entirely unrelated. Europol states:

The Matrix protocol (matrix.org) is by no means connected to the Matrix secured communication service that was targeted in OTF Continental.

A statement from the Dutch police confirms that this is unrelated: "Matrix is ​​also the name of a company and communications protocol of the same name, which has nothing to do with the crypto communications service Matrix."

🔗Matrix Live

🔗Dept of Status of Matrix 🌡️

Thib (m.org) says

Don't forget that Matrix will be in full force @ FOSDEM:

• The CfP for the Matrix Devroom closes on Sunday, December 1
• We already have quite a few volunteers to help us with the booth, but we're always looking for more hands! People who sign up before December 15 are entitled to a limited edition t-shirt :)
• Two organizations have already shown their commitment to the community by offering to sponsor the Fringe Event right before FOSDEM. Pizzas and drinks will be covered, but if other organizations want to sponsor too we can work on more opportunities together!

Continue reading…