element-hq / element-hq/element-web
scary red shield warnings appear in Settings: Sessions for devices that do not support encryption
- Dominant language
- TypeScript
- Stars
- 13.5k
- Forks
- 2.8k
- PR merge metrics
- PR metrics pending
Description
### Steps to reproduce
1. Establish an account with verified devices.
2. Log in a new device using a client that does not support encryption. That is, one that does not upload device keys.
3. Log in as a verified device using Element Web.
### Outcome
#### What did you expect?
No warnings. No suggestion that anything is wrong. Nothing to scare the account owner.
#### What happened instead?
1. Upon logging in, Element Web interrupts my workflow with a "You have unverified sessions" dialog box displaying a scary red shield with an exclamation point.
2. Upon opening the Settings: Sessions panel, Element Web shows something like this:
Settings: Sessions
Security recommendations
🛡️ Unverified sessions
Verify your sessions for enhanced secure messaging or sign out from those you don't recognize or use anymore.
View all (1)
Other sessions
🛡️ Unverified sessions
Verify your sessions for enhanced secure messaging or sign out from those you don't recognize or use anymore.Learn more
Notifier
Unverified · Last activity 01:23 · 192.168.0.0 · ABCDEFGHIJ
Notifier
🛡️ Unverified session
This session doesn't support encryption and thus can't be verified.
Note that the shields represented by emoji above are actually bright red, on large red backgrounds, with exclamation points on them.
@uhoreg explained in https://github.com/element-hq/element-web/issues/30709#issuecomment-3321195134 that this is a bug, so I'm reporting it here, as requested.
### Operating system
N/A
### Browser information
N/A
### URL for webapp
https://app.element.io/
### Application version
Element version: 1.11.112
### Homeserver
matrix.org
### Will you send logs?
No
Contributor guide
Assessment
This issue has not been assessed yet.