Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't verify user when option to send keys to verified devices only is selected #6723

Closed
Tracked by #532
BillCarsonFr opened this issue Aug 3, 2022 · 1 comment · Fixed by #7290
Closed
Tracked by #532
Labels
A-E2EE-SAS-Verification O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Defect Something isn't working: bugs, crashes, hangs and other reported problems Team: Crypto

Comments

@BillCarsonFr
Copy link
Member

Steps to reproduce

  1. Go to Settings > Security & Privacy
  2. Enable 'Encrypt to verified devices only'
  3. Go back to a DM with one of your contact, click on his profile
  4. Tap on verify.

Outcome

What did you expect?

That you initiate a verification process.

What happened instead?

It's failing because the recipient won't be able to decrypt the verification request
image

So it's quite annoying, I enabled 'Encrypt to verified devices only' and I have unverified users in a room. So you would think that verify them will fix the issue, but you can't

Your phone model

No response

Operating system version

No response

Application version and app store

1.4.32

Homeserver

local synapse

Will you send logs?

No

Are you willing to provide a PR?

Yes

@BillCarsonFr
Copy link
Member Author

BillCarsonFr commented Aug 3, 2022

As per spec:

When using in-room messages and the room has encryption enabled, clients should ensure that encryption does not hinder the verification. For example, if the verification messages are encrypted, clients must ensure that all the recipient’s unverified devices receive the keys necessary to decrypt the messages, even if they would normally not be given the keys to decrypt messages in the room. Alternatively, verification messages may be sent unencrypted, though this is not encouraged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE-SAS-Verification O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Defect Something isn't working: bugs, crashes, hangs and other reported problems Team: Crypto
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants