element-hq / element-hq/element-web

[Story] Force devices to be verified

Open
#28,464 3 comments 0 reactions 0 assignees View on GitHub
A-E2EE T-Feature
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

Part of the [Trust And Decoration v2](https://github.com/element-hq/crypto-internal/issues/282) work.

## Context

We will soon ignore devices not signed by their users when encrypting and decrypting room events.
As a consequence a non verified device will not be able to participate in an encrypted room (will not receive room keys, and room keys sent will be ignored).

Currently it is optional to verify your device on login, the flow can be skipped. We want it to be non-skippable now in preparation for the future change.
image

## Breakdown

- [x] element-hq/crypto-internal#285
- [x] element-hq/crypto-internal#305

Later:
- [x] element-hq/crypto-internal#286
- [ ] https://github.com/element-hq/element-web/issues/31073

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.