Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose message kind to platform SDKS so they can spot fake GroupMembershipChanged messages #522

Closed
neekolas opened this issue Feb 20, 2024 · 0 comments
Assignees

Comments

@neekolas
Copy link
Contributor

neekolas commented Feb 20, 2024

Valid GroupMembershipChanged messages only get created from inside libxmtp and have a special kind that distinguishes them from regular user-created messages. Today, a malicious client could send a fake GroupMembershipChange messages saying they added/removed someone to a group. We should expose the message kind to integrators so they can spot these fake messages and ignore them.

@neekolas neekolas converted this from a draft issue Feb 20, 2024
@neekolas neekolas changed the title Expose message type to platform SDKS so they can spot fake GroupMembershipChanged messages Expose message kind to platform SDKS so they can spot fake GroupMembershipChanged messages Feb 20, 2024
@nplasterer nplasterer self-assigned this Apr 5, 2024
@github-project-automation github-project-automation bot moved this from Todo to Done in MLS Work Apr 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

No branches or pull requests

3 participants