Warn the user more on the implications of logging in

[Mikaela]

I am worried about the homeserver getting all access to Telegram message history and the ability of sending messages as the user. I understood that currently there is only warning on Telegram side of not giving the code anyone else.

Another thing I worry about is that while I can decide whether or not I trust a public provider with my credentials of another service, how do I know if my Telegram contacts are using Telemautrix and thus sending private discussions that I am trusting to Telegram also to some Matrix homeserver? There is nothing illegal being done at least with Finnish laws, but I am not sure how ethical this is.

I am opening this issue based on discussion at Matrix and t2bot/t2bot.io#15.

[Mikaela]

How are redactions handled? If e.g. naked selfies were exchanged on Telegram and removed there, would they also be automatically removed from Matrix side? Or are they only hidden from view and still stored forever somewhere in Synapse?

matrix-org/synapse#1287 & matrix-org/synapse#2369 hint to me that they are stored forever without warning?

What if it was illegal content?

[Extarys]

from what I understand, files uploaded and stored on a marix server stays there indefinitely, even if the message is deleted on the matrix/riot side.

[tulir]

How are redactions handled?

The bridge redacts the messages on Matrix, after which it's up to the Matrix server.