element-hq / element-hq/element-web

Remove the ability to skip device verification during login

Open
#31,073 1 comment 0 reactions 0 assignees View on GitHub
A-E2EE A-Login S-Major T-Enhancement
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

We will soon ignore devices not signed by their users when encrypting and decrypting room events.
As a consequence a non verified device will not be able to participate in an encrypted room (will not receive room keys, and room keys sent will be ignored).

Currently it is optional to verify your device on login, the flow can be skipped. We want it to be non-skippable now in preparation for the future change.
image

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.