element-hq / element-hq/element-web

emoji verification on login ignores the `m.key.verification.start` sent by the other party

Open
#20,773 0 comments 1 reaction 0 assignees View on GitHub
A-E2EE A-E2EE-SAS-Verification O-Occasional S-Major T-Defect
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

If you

- log in to Element Web
- try to verify the new device with an existing device
- the existing device sends an `m.key.verification.start` message

then the new device will ignore the `m.key.verification.start` message, and when you click the button to start the verification, then it will send its own `m.key.verification.start`, which can cause problems with the glare resolution as defined in https://spec.matrix.org/unstable/client-server-api/#key-verification-framework, since Element Web doesn't notice that there is glare, and both sides may end up waiting indefinitely for the other side to respond.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.