Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scan attachments for virus #2841

Closed
yostyle opened this issue Nov 11, 2023 · 1 comment
Closed

Scan attachments for virus #2841

yostyle opened this issue Nov 11, 2023 · 1 comment

Comments

@yostyle
Copy link

yostyle commented Nov 11, 2023

Matrix Rust SDK should optionally be able to communicate with an antivirus server to scan all attachments of a room before displaying them or let the user download or open it.

This will be similar to what have been done on Tchap (API/UX-UI):

Files are uploaded to the media repository as normal
When downloading a file, the client send its decryption key to the server, itself encrypted using a public key provided by the content scanner
The content scanner uses the decryption key to decrypt the file and scan it against current virus definitions
If the media is virus free, the encrypted file is returned to the client and the decrypted media securely removed from the server
The scan result is cached by the content scanner so that if somebody else asks for the file again, it can be provided without being decrypted
The cached result is persisted until virus definitions are updated or the server is rebooted
Ref:

on client side:

The restClient is already in Element Android SDK https://github.com/vector-im/element-android/tree/main/matrix-sdk-android/src/main/java/org/matrix/android/sdk/internal/session/contentscanner

@manuroe
Copy link
Contributor

manuroe commented Nov 15, 2023

There is no plan to have this feature in matrix-rust-sdk as it is not yet specified with a MSC.

@manuroe manuroe closed this as completed Nov 15, 2023
@manuroe manuroe closed this as not planned Won't fix, can't repro, duplicate, stale Nov 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants