element-hq / element-hq/element-web

Silently reset cross-signing on new login if there's no other devices, no 4S, and no encrypted chats

Open
#20,307 1 comment 0 reactions 1 assignee Claimed by @duxovni View on GitHub
A-E2EE A-Logout O-Occasional O-Uncommon S-Minor T-Defect
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

Right now, if someone only ever uses Element for unencrypted chats, and logs out of their only device without setting up 4S, we unnecessarily present them with a scary "reset your keys" dialog when they login again. I think it's probably worth confirming the reset if they do have encrypted chats, so they're aware they'll need to reverify with people (especially in a TOFU world), but if there aren't any encrypted chats, we shouldn't bother prompting the user about the reset.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.