Skip to main content


Reminder: tomorrow September 4th we will fully enable authenticated media on matrix.org, and freeze unauthenticated media endpoints!

Users may see errors downloading images and files from matrix.org users – the solution is to update your client/server. If that doesn't do it, visit the support room for your client/server software, or the homeserver you reside on, for more information.

#Matrix

in reply to The Matrix.org Foundation

For those, myself included, who wish to understand what 'authenticated media' means:

"fixes a long-standing design flaw in Matrix where media (images, avatars, files, etc) can be accessed without authentication if the URL is known. Matrix 1.11 fixes this by requiring authentication on these URLs, removing the ability for users to treat homeservers as CDNs for hosting arbitrary Matrix content for arbitrary users."

matrix.org/blog/2024/06/26/sun…

⇧