element-hq / element-hq/element-web

Element Web warns of unencrypted message in E2EE room

Open
#21,729 5 comments 0 reactions 0 assignees View on GitHub
A-E2EE O-Uncommon S-Major T-Defect Z-Cache-Confusion
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

### Steps to reproduce

Unfortunately, no reproduction has been found yet. Will update this if something is discovered. For now, the following observations have been made:

1. There was a E2EE room inside a space.
2. A user in the room had a buggy view of the room (it appeared like an unnamed group chat with a list of people)
3. That user sent a message to the room.
4. Multiple element-web clients reported the message as unencrypted, while one user's element-android did not.

### Outcome

#### What did you expect?

All messages in an E2EE room are encrypted.

#### What happened instead?

An unencrypted message was sent to an E2EE room.

### Operating system

Arch Linux

### Browser information

chromium 100.0.4896.60-1

### URL for webapp

https://app.element.io/

### Application version

Element version: 1.10.8 Olm version: 3.2.8

### Homeserver

matrix.org

### Will you send logs?

Yes

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.