You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: proposals/4161-crypto-terminology.md
+11-33Lines changed: 11 additions & 33 deletions
Original file line number
Diff line number
Diff line change
@@ -81,17 +81,17 @@ clients SHOULD use the language specified, except where their own users are
81
81
known to understand different terms more easily. When making such exceptions,
82
82
clients SHOULD document how they deviate from this document, and why.
83
83
84
-
### Devices
84
+
### Devices (Sessions)
85
85
86
86
**Note: this section depends on [MSC4153 ("Exclude non-cross-signed devices")](https://github.com/matrix-org/matrix-spec-proposals/pull/4153), which specifies clients should avoid sending
87
87
and receiving encryption info with devices that are not cross-signed by their
88
88
owner ("insecure" devices in our terminology).** While MSC4153 remains unmerged,
89
89
the parts of this section relating to insecure devices should be considered
90
90
non-normative.
91
91
92
-
Instances of a client are called 'devices' (not 'sessions'). Aligned with
92
+
Instances of a client are called 'devices' or alternatively 'sessions'. Aligned with
93
93
[MSC4153](https://github.com/matrix-org/matrix-spec-proposals/pull/4153), we take it as granted that all devices taking part in encryption have been cross-signed by the
94
-
user who owns them, and we call these **devices**.
94
+
user who owns them, and we call these simply **devices** or **sessions**.
95
95
96
96
Devices which have published cryptographic keys (thus being visible as "cryptographic devices" to other users)
97
97
but which have not been cross-signed are considered an error
@@ -122,9 +122,6 @@ cryptography to understand.
122
122
123
123
⚠️ Avoid mentioning "device keys" - a device is just secure or not.
124
124
125
-
⚠️ Avoid "session" to mean device. Device better describes what most users
126
-
encounter, and is more commonly used in other messaging apps.
127
-
128
125
#### Logging out
129
126
130
127
In contrast to some other services, **logging out** (or **signing out**) of a
@@ -399,33 +396,14 @@ over time.
399
396
400
397
### Device vs. Session
401
398
402
-
There is debate over the use of the word "device" to identify an instance of a
403
-
client. Objections to "device" include:
404
-
405
-
* Multiple apps on the same physical device will be listed as separate devices,
406
-
which may cause confusion.
407
-
* Logging out and in on the same physical device will result in a new "device"
408
-
being created.
409
-
* Some applications, especially on Web, use "session" for this concept.
410
-
411
-
The most popular alternative is "session". Objections to "session" include:
412
-
413
-
* It is an unfamiliar word for non-technical users: they have no metaphor to
414
-
work with to understand it.
415
-
* It has multiple existing alternative meanings within Matrix.
416
-
417
-
"Device" was chosen in the proposal because:
418
-
419
-
* It is familiar from similar messaging apps.
420
-
* It has a clear meaning in everyday speech, giving users a stepping-stone
421
-
towards understanding what it means in this context.
422
-
* For novice users, it corresponds well with the everyday meaning: when they
423
-
first engage with Matrix, they will use one "device" per physical device.
424
-
* The extension to think of multiple virtual "devices" on a physical device is
425
-
simple and familiar from other applications.
426
-
* Messaging apps are increasingly used on mobile devices, especially as the
427
-
first point of contact, and "device" is commonly used in mobile apps.
428
-
* The spec uses "device" for precisely this concept, which is a bonus.
399
+
There is debate over whether "device" or "session" is the best word to identify
400
+
an instance of a client. In practice, many clients use both words, and there is
401
+
no consensus among the community for which is best.
402
+
403
+
This proposal initially chose "device" but it became clear that many people had
404
+
strong opinions in both directions, meaning that some clients would probably
405
+
stick with their wording even if the spec recommended otherwise, so it seemed
0 commit comments