element-hq / element-hq/element-web

Check device signatures of the master key to find verif devices

Open
#13,281 0 comments 0 reactions 0 assignees View on GitHub
A-E2EE-Cross-Signing
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

At the moment when logging in with cross-signing, we hold the user at the "verify this session" / complete security screen suggesting they should use another device to verify.

As an improvement, we could investigate looking for device signatures of the master key and comparing that to active devices as a way to gather whether the user has any other devices than could be used. Then we can customise the instructions to user / alter the UX in case there are no other cross-signing aware devices to use.

**Warning:** If this would add even more requests to the sign in flow (which is already under heavy load), we should consider our approach carefully.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.