Hey lovely Riot folks, Welcome to the Riot Web 1.6.6 update. This is a relatively incremental release, but we do have a few feature updates alongside all the normal bug and performance fixes.

Hi all, It's almost four years since we launched Riot, and it's been a crazy journey - going from a relatively bare bones Matrix app through to today's all-singing, all-dancing encrypted-by-default collaboration tool used by folks ranging from Mozilla to the French Government and beyond. However, as some may know, we’ve had a few problems with the name Riot over the years.

Hello everyone! We’ve released a few updates for Riot today, grouped under the logically titled 1.6.3 (guess what the previous update was called...more on that later). Heads up that 1.6.3 is a security update, so please upgrade - many thanks to Quentin Gliech for reporting a vulnerability in single sign-on (SSO) deployments where Riot could be confused into sending authentication details to an attacker-controlled server. We are not aware of this being abused in practice.