From 3b38d2f50789fc69bdd6249683ca5922c3c342b9 Mon Sep 17 00:00:00 2001 From: Matthew Hodgson Date: Thu, 4 Sep 2014 02:35:18 +0100 Subject: [PATCH] big warning --- README.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/README.rst b/README.rst index 9ae870e4c7..6791e686b7 100644 --- a/README.rst +++ b/README.rst @@ -17,6 +17,23 @@ The overall architecture is:: client <----> homeserver <=====================> homeserver <----> client https://somewhere.org/_matrix https://elsewhere.net/_matrix +WARNING +======= + +**Synapse is currently in a state of rapid development, and not all features are yet functional. +Critically, some security features are still in development, which means Synapse can *not* +be considered secure or reliable at this point.** For instance: + +- **SSL Certificates used by server-server federation are not yet validated.** +- **Room permissions are not yet enforced on traffic received via federation.** +- **Homeservers do not yet cryptographically sign their events to avoid tampering** +- Default configuration provides open signup to the service from the internet + +Despite this, we believe Synapse is more than useful as a way for experimenting and +exploring Synapse, and the missing features will land shortly. **Until then, please do *NOT* +use Synapse for any remotely important or secure communication.** + + Quick Start ===========