search

element-hq / element-web

A glossy Matrix collaboration client for the web.
https://element.io
GNU Affero General Public License v3.0
11.21k stars 2k forks source link

Permanently dismiss "unverified device" message. #12657

Open squidink7 opened 4 years ago

squidink7 commented 4 years ago

When opening Riot it always gives me an alert about one of my devices are unverified. this device, however, is not using cross-signing and I can't be bothered going through the manual verification process.

It would be nice if there was an option in settings to ignore the unverified device so that I am not pestered by the message every time I open Riot. (also it would be nice for it to show up as a big red warning shield in the member/device list)

I am aware that this does come with security risks, but if people do not trust any unverified devices they can just use the "never encrypt to unverified devices" option in settings.

This would go a long way to improving the usability of Riot, as it decreases the amount of warnings an just letting people focus on their conversations (while maintaining the security of having an encrypted room)

turt2live commented 4 years ago

@jryans this is one for the cross-signing queue, but I'm not sure how you categorize those

jryans commented 4 years ago

Thanks for the feedback. At the moment, we believe the current default is good for most people who start using cross-signing, as other people should expect to see a green check (all your devices verified) for any users who have verified each other.

However, we understand not everyone wants it to work this way. We'll track this suggestion for discussion after the core cross-signing work is released.