Identity service should do lookups based on hashed 3PIDs, not plaintext ones. #2130
Labels
identity service
improvement
A suggestion for a relatively simple improvement to the protocol
privacy-sprint
Temporary label: privacy-related stuff
There is no reason for an IS to ever handle plaintext 3PIDs when doing a lookup; from a privacy perspective we should hash them.
The text was updated successfully, but these errors were encountered: