matrix-org / matrix-org/matrix-spec

One-time-key upload/claim is racy

Open
#1,124 4 comments 0 reactions 0 assignees View on GitHub
A-E2EE wart
Dominant language
HTML
Stars
330
Forks
150
Avg merge
2h 21m
Merged PRs (30d)
3

Description

* Alice tries to upload one-time-key, but doesn't get response
* Bob claims the key
* Alice uploads the key again
* Charlie claims the key

Only one of Bob or Charlie can use the key to talk to Alice.

Contributor guide

Open the contributing guide

Research direction

No file or test is named in the issue. Begin by locating the Matrix specification sections covering one-time-key upload and claim, then define the expected behavior for the interrupted upload and retry scenario; done requires the specification to make clear that a key cannot be used by both Bob and Charlie.

Written by the indexing model from the issue text.

Assessment

Domain
networking
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.