element-hq / element-hq/dendrite

Verified session is shown as 'Not trusted'

Open
#3,412 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
965
Forks
101
PR merge metrics
No merged PRs in 30d

Description

*This issue was originally created by [**@dimonb**](https://github.com/dimonb) at .*

### Background information

- **Dendrite version or git SHA**: /etc/dendrite # 0.13.7+14a6c10
- **SQLite3 or Postgres?**: postgres
- **Running in Docker?**: yes
- **`go version`**:
- **Client used (if applicable)**: Any client

### Description

- **What** is the problem:
Some verified sessions shown as 'Not Trusted' to others if contact verified after session
- **Who** is affected:
Any who verify my contact after I've added new session
- **How** is this bug manifesting:
Your contact shown as not trusted to others when then verify you
- **When** did this first appear:
When I register new session with other device after contact verification

session AG3_a329 is Verified. Marked as green and all seems nice.

Screenshot 2024-09-02 at 18 16 46

session AG3_a329 shown as not trusted
Screenshot 2024-09-02 at 18 15 50

Refreshing clients does not help. Problem is reproduces on app.element.io

### Steps to reproduce

- create test account on homeserver
- create test account on matrix.org
- verify each other
- register new session in homesever
- session of test user shown as 'Not trusted' on matrix.org

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the listed two-account flow on Dendrite 0.13.7+14a6c10 with Postgres, then trace the server handling of device verification and newly registered sessions. Done means a session added after contact verification is shown as trusted to the other user, including when tested through app.element.io.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, postgres
Domain
backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.