element-hq / element-hq/element-ios

Reject 4S key sharing requests after timeout

Open
#3,023 0 comments 0 reactions 0 assignees View on GitHub
A-E2EE-Cross-Signing
Dominant language
Swift
Stars
1.8k
Forks
544
PR merge metrics
PR metrics pending

Description

From riot-web created by [jryans](https://github.com/jryans): vector-im/riot-web#12664

After N seconds have passed since a device was verified, we should silently reject 4S key sharing requests from it.

(The value of N is still up for discussion.)

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by locating the Swift code that handles 4S key-sharing requests and device verification, then determine how the timeout should be represented. Done means requests are silently rejected after the agreed number of seconds, with coverage for the timeout behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
swift
Domain
cryptography, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.