Mitigating abuse of the event depth parameter over federation

[benparsons]

Documentation: https://docs.google.com/document/d/16ofbjluy8ZKYL6nt7WLHG4GqSodJUWLUxHhI6xPEjr4/edit
Author: @ara4n
Date: 30/04/2018

[turt2live]

Does this have an implementation component already?

[richvdh]

Does this have an implementation component already?

Erik started work on it (PR list at matrix-org/synapse#3785), but got distracted.

A temporary mitigation was put in place via #1230.

[turt2live]

This is still missing an implementation as far as I can tell. Downgraded from spec-pr-missing to our new "pending implementation" status. This MSC does not require a FCP due to being grandfathered from an older system, and has already been considered "accepted".

[turt2live]

This is blocked on implementation, which is unlikely to happen any time soon. I'm also curious if this should go through another round of review/FCP given its age and having followed a legacy process in the past.