element-hq / element-hq/element-android

Session verification wildly inconsistent

Open
#2,602 5 comments 8 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
3.7k
Forks
917
PR merge metrics
No merged PRs in 30d

Description

**Premise:** *User A*, multiple sessions, all verified, cross-verification is confirmed to work by the clients. *User B*, one session, one device.

**Behaviour:** I will only give one example for how this does *not* work, as we have tried countless combinations and they all lead to some similarly broken result (i.e. one where *User B* is not verified across all sessions of *User A* and the verification state is strangely inconsistent *within* a single session/client, too), among which one scenario in which my own session claims that my own messages from another session could not be verified.

*User A* initiates a verification request using Element Android in session *S*, which prompts both parties for Emoji comparison. Verification is then (allegedly) successfully completed. The verification is not respected by any of the other sessions of *User A* (in these sessions *User B* still shows as unverified). Meanwhile, in *S*, the user still shows as *Unverified* ("Black Shield" icon) in the room's user list, while they appear as *Verified* ("Green Shield" icon) in their profile.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.