element-hq / element-hq/element-android
Session verification wildly inconsistent
- Dominant language
- Kotlin
- Stars
- 3.7k
- Forks
- 917
- PR merge metrics
- No merged PRs in 30d
Description
**Premise:** *User A*, multiple sessions, all verified, cross-verification is confirmed to work by the clients. *User B*, one session, one device.
**Behaviour:** I will only give one example for how this does *not* work, as we have tried countless combinations and they all lead to some similarly broken result (i.e. one where *User B* is not verified across all sessions of *User A* and the verification state is strangely inconsistent *within* a single session/client, too), among which one scenario in which my own session claims that my own messages from another session could not be verified.
*User A* initiates a verification request using Element Android in session *S*, which prompts both parties for Emoji comparison. Verification is then (allegedly) successfully completed. The verification is not respected by any of the other sessions of *User A* (in these sessions *User B* still shows as unverified). Meanwhile, in *S*, the user still shows as *Unverified* ("Black Shield" icon) in the room's user list, while they appear as *Verified* ("Green Shield" icon) in their profile.
Contributor guide
Assessment
This issue has not been assessed yet.