matrix-org / matrix-org/matrix-hookshot
Hookshot doesn't verify it's devices
- Dominant language
- TypeScript
- Stars
- 450
- Forks
- 95
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 23
Description
This generates red warning on all it's encrypted messages
And E2EE Hookshot will stop working entirely once [MSC4153: Exclude non-cross-signed devices](https://github.com/matrix-org/matrix-spec-proposals/pull/4153) gets implemented.
Contributor guide
Research direction
Start by reproducing the red warning on encrypted messages in E2EE Hookshot and review the device-verification flow. Compare its behavior with MSC4153, then verify that encrypted messages no longer warn and that E2EE Hookshot continues working when non-cross-signed devices are excluded.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100