Skip to content

Commit 00993d9

Browse files
committed
Allow either 'device' or 'session'
1 parent 6754d25 commit 00993d9

File tree

1 file changed

+11
-33
lines changed

1 file changed

+11
-33
lines changed

proposals/4161-crypto-terminology.md

Lines changed: 11 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -81,17 +81,17 @@ clients SHOULD use the language specified, except where their own users are
8181
known to understand different terms more easily. When making such exceptions,
8282
clients SHOULD document how they deviate from this document, and why.
8383

84-
### Devices
84+
### Devices (Sessions)
8585

8686
**Note: this section depends on [MSC4153 ("Exclude non-cross-signed devices")](https://github.com/matrix-org/matrix-spec-proposals/pull/4153), which specifies clients should avoid sending
8787
and receiving encryption info with devices that are not cross-signed by their
8888
owner ("insecure" devices in our terminology).** While MSC4153 remains unmerged,
8989
the parts of this section relating to insecure devices should be considered
9090
non-normative.
9191

92-
Instances of a client are called 'devices' (not 'sessions'). Aligned with
92+
Instances of a client are called 'devices' or alternatively 'sessions'. Aligned with
9393
[MSC4153](https://github.com/matrix-org/matrix-spec-proposals/pull/4153), we take it as granted that all devices taking part in encryption have been cross-signed by the
94-
user who owns them, and we call these **devices**.
94+
user who owns them, and we call these simply **devices** or **sessions**.
9595

9696
Devices which have published cryptographic keys (thus being visible as "cryptographic devices" to other users)
9797
but which have not been cross-signed are considered an error
@@ -122,9 +122,6 @@ cryptography to understand.
122122

123123
⚠️ Avoid mentioning "device keys" - a device is just secure or not.
124124

125-
⚠️ Avoid "session" to mean device. Device better describes what most users
126-
encounter, and is more commonly used in other messaging apps.
127-
128125
#### Logging out
129126

130127
In contrast to some other services, **logging out** (or **signing out**) of a
@@ -399,33 +396,14 @@ over time.
399396

400397
### Device vs. Session
401398

402-
There is debate over the use of the word "device" to identify an instance of a
403-
client. Objections to "device" include:
404-
405-
* Multiple apps on the same physical device will be listed as separate devices,
406-
which may cause confusion.
407-
* Logging out and in on the same physical device will result in a new "device"
408-
being created.
409-
* Some applications, especially on Web, use "session" for this concept.
410-
411-
The most popular alternative is "session". Objections to "session" include:
412-
413-
* It is an unfamiliar word for non-technical users: they have no metaphor to
414-
work with to understand it.
415-
* It has multiple existing alternative meanings within Matrix.
416-
417-
"Device" was chosen in the proposal because:
418-
419-
* It is familiar from similar messaging apps.
420-
* It has a clear meaning in everyday speech, giving users a stepping-stone
421-
towards understanding what it means in this context.
422-
* For novice users, it corresponds well with the everyday meaning: when they
423-
first engage with Matrix, they will use one "device" per physical device.
424-
* The extension to think of multiple virtual "devices" on a physical device is
425-
simple and familiar from other applications.
426-
* Messaging apps are increasingly used on mobile devices, especially as the
427-
first point of contact, and "device" is commonly used in mobile apps.
428-
* The spec uses "device" for precisely this concept, which is a bonus.
399+
There is debate over whether "device" or "session" is the best word to identify
400+
an instance of a client. In practice, many clients use both words, and there is
401+
no consensus among the community for which is best.
402+
403+
This proposal initially chose "device" but it became clear that many people had
404+
strong opinions in both directions, meaning that some clients would probably
405+
stick with their wording even if the spec recommended otherwise, so it seemed
406+
more pragmatic to allow either.
429407

430408
## Further work
431409

0 commit comments

Comments
 (0)