ETetkecc
matrix-s2s

Our signing keys

Changed on

Our own published ed25519 signing keys, signed by us, so federation can check that the requests we send are actually ours. It is a naive notary. verify_keys is a map because the spec key set is dynamic, keyed by key ID.

get/_matrix/key/v2/server

Request

Response

Our signed public signing keys

old_verify_keysobject

rotated-out keys, kept so old signatures still verify

server_namestring

the server these keys belong to

signaturesobject

server -> keyID -> signature over this object

valid_until_tsinteger

keys are trustworthy until this ms timestamp

verify_keysobject

keyID -> {"key": base64 ed25519 public key}

Changes