element-hq / element-hq/element-web
Do not display Session ID and Session Key in Encryption Settings (was: "Reset Cryptographic Identity" does not rotate keys)
Open
A-E2EE
O-Uncommon
S-Tolerable
T-Defect
Team: Crypto
- Dominant language
- TypeScript
- Stars
- 13.5k
- Forks
- 2.8k
- PR merge metrics
- PR metrics pending
Description
See @uhoreg 's suggestion below for how we want to deal with this.
old:
### Steps to reproduce
1. Settings: Encryption -> Advanced
2. Make note of the session key.
3. Click "Reset cryptographic identity".
4. Follow prompts to reset successfully.
5. Check session key and it is unchanged.
### Outcome
#### What did you expect?
I expect fresh session keys when resetting.
#### What happened instead?
The old key appears to be in use.
### Operating system
_No response_
### Browser information
Brave 1.86.148 (Official Build) (64-bit) Chromium: 144.0.7559.133
### URL for webapp
_No response_
### Application version
_No response_
### Homeserver
_No response_
### Will you send logs?
No
Contributor guide
Assessment
This issue has not been assessed yet.