element-hq / element-hq/element-web

scary red shield warnings appear in Settings: Sessions for devices that do not support encryption

Open
#30,837 2 comments 0 reactions 0 assignees View on GitHub
A-E2EE A-Session-Mgmt O-Occasional S-Major T-Defect Team: Crypto
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

### Steps to reproduce

1. Establish an account with verified devices.
2. Log in a new device using a client that does not support encryption. That is, one that does not upload device keys.
3. Log in as a verified device using Element Web.

### Outcome

#### What did you expect?

No warnings. No suggestion that anything is wrong. Nothing to scare the account owner.

#### What happened instead?

1. Upon logging in, Element Web interrupts my workflow with a "You have unverified sessions" dialog box displaying a scary red shield with an exclamation point.
2. Upon opening the Settings: Sessions panel, Element Web shows something like this:

Settings: Sessions
Security recommendations
🛡️ Unverified sessions
Verify your sessions for enhanced secure messaging or sign out from those you don't recognize or use anymore.
View all (1)

Other sessions
🛡️ Unverified sessions
Verify your sessions for enhanced secure messaging or sign out from those you don't recognize or use anymore.Learn more

Notifier
Unverified · Last activity 01:23 · 192.168.0.0 · ABCDEFGHIJ
Notifier
🛡️ Unverified session
This session doesn't support encryption and thus can't be verified.

Note that the shields represented by emoji above are actually bright red, on large red backgrounds, with exclamation points on them.

@uhoreg explained in https://github.com/element-hq/element-web/issues/30709#issuecomment-3321195134 that this is a bug, so I'm reporting it here, as requested.

### Operating system

N/A

### Browser information

N/A

### URL for webapp

https://app.element.io/

### Application version

Element version: 1.11.112

### Homeserver

matrix.org

### Will you send logs?

No

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.