Open
Description
Link to problem area:
https://spec.matrix.org/v1.13/client-server-api/#listing-rooms
Issue
Says that GET /_matrix/client/v3/directory/list/room/{roomId}
doesn't require authentication
In practice, Synapse auths it by default:
Expected behaviour
Spec should make it clear that servers can auth it (and the federation endpoints) and are encouraged to do so.