Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scan attachments for virus #1388

Closed
bmarty opened this issue May 20, 2020 · 0 comments
Closed

Scan attachments for virus #1388

bmarty opened this issue May 20, 2020 · 0 comments
Assignees

Comments

@bmarty
Copy link
Member

bmarty commented May 20, 2020

RiotX should optionally be able to communicate with an antivirus server to scan all attachments of a room before displaying them or let the user download or open it.

This will be similar to what have been done on Tchap (API/UX-UI):

  • Files are uploaded to the media repository as normal
  • When downloading a file, the client send its decryption key to the server, itself encrypted using a public key provided by the content scanner
  • The content scanner uses the decryption key to decrypt the file and scan it against current virus definitions
  • If the media is virus free, the encrypted file is returned to the client and the decrypted media securely removed from the server
  • The scan result is cached by the content scanner so that if somebody else asks for the file again, it can be provided without being decrypted
  • The cached result is persisted until virus definitions are updated or the server is rebooted

Ref:

on client side:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants