element-hq / element-hq/element-web

Config flag to disable Secure Backup upload

Open
#18,807 0 comments 0 reactions 0 assignees View on GitHub
A-E2EE-Key-Backup O-Uncommon S-Minor T-Enhancement
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

### Your use case

#### What would you like to do?
- Not uploading keys to Secure Backup.
- Not having to provide a password when restoring Secure Backup.

![secure-backup-restore-requires-password](https://user-images.githubusercontent.com/10872136/131103944-0bc6592a-50d8-4ff1-ae7e-32fb7cede076.gif)

#### Why would you like to do it?
- Because I know another Matrix client receives and uploads all keys.
- Appservices can get an access token for an account without having to register a password for it. (merged [MSC2778](https://github.com/matrix-org/matrix-doc/pull/2778))
- If a human wants to log in to such an account, the appservice can provide an access token but no password.
- Uploading keys to Secure Backup isn't important, if the account is commonly managed and backed up by a bot.

#### How would you like to achieve it?
- A config flag `disableSecureStorageUpload` (boolean, defaults to `false`).
- You can still restore Secure Backup but it will be read-only.

### Have you considered any alternatives?

A config flag to disable all flows which require an account password and use the access token where possible or disable features. (e.g. changing the password)

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.