element-hq / element-hq/element-web

"Never send encrypted messages to unverified sessions from this session" can't be undone without restarting the client

Open
#29,466 2 comments 0 reactions 0 assignees View on GitHub
A-App Settings A-E2EE O-Uncommon S-Minor T-Defect
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

### Steps to reproduce

1. Toggle on the global setting "Never send encrypted messages to unverified sessions from this session"
2. Type in a room to someone, who sees a "The sender has blocked you from receiving this message because your device is unverified"
3. Turn off the setting
4. Notice that the message keys are still being withheld.
5. Restart the client
6. Send a message
7. The message now comes in clearly.

### Outcome

#### What did you expect?

The messages should be received by the recipient after the setting is disabled.

#### What happened instead?

They continued to not receive messages until I restarted the client.

### Operating system

Arch Linux

### Application version

Element version: 1.11.92 Crypto version: Rust SDK 0.9.0 (5de53c7), Vodozemac 0.8.1

### How did you install the app?

Arch package

### Homeserver

half-shot.uk

### Will you send logs?

Yes

Contributor guide

Open the contributing guide

Research direction

No source file or test is named. Start by reproducing the setting toggle and message-key withholding sequence in Element Web, then trace the client-side encryption state across disabling the setting and restarting. Done means messages are delivered after the setting is disabled without restarting, with a regression test covering the sequence.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust, typescript
Domain
frontend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.