Christoph Settgast

Yes @erikjohnston, I have deployed this for 10 days now and it helps immensely: https://github.com/element-hq/synapse/issues/17129#issuecomment-2080918653 This is on a public homeserver with a reasonable amount of rooms and active users,...

Same here on a semi-large homeserver deployment. Issues started with 1.105.0, get_auth_chain_difference_chains running for minutes instead of seconds. It persistet through 1.105.1:  This evening...

One more update: By reverting #17044, but keeping the class method in place for the security fix 55b0aa847a61774b6a3acdc4b177a20dc019f01a, I now have a synapse that is back to normal for `get_auth_chain_difference_chains`:...

As far as I see, no more open questions

Thanks a lot, I will surely test on macOS, I also have the latest macOS version now available to test

It seems that only Rusts native-tls crate does not support TLS 1.3: https://github.com/sfackler/rust-native-tls/issues/140, while the underlying security-framework crate supports it (https://docs.rs/security-framework/latest/security_framework/secure_transport/struct.SslProtocol.html#associatedconstant.TLS13), because Apples underlying Secure Transport support it since a...

Looks like I had a thinko on this and while iOS supported TLS 1.3 for a while eg via URLSession etc, the specific Secure Transport Framework (which is [deprecated](https://developer.apple.com/documentation/security/secure_transport)) does...

**TLDR: use rustls on iOS/macOS in the matrix-rust-sdk Swift version as Apple recommends to use your own TLS implementation if you use cross-platform code via sockets.** Long version: I did...

Unfortunately its not yet that simple, as the underlying rustls-native-certs does not support iOS or Android, if I read this correctly: https://github.com/rustls/rustls-native-certs/issues/3 But the new https://github.com/rustls/rustls-platform-verifier should be able to...

Thank you for highlighting this. For reference, this is tracked upstream in electron as https://github.com/electron/electron/issues/41066