element-hq / element-web

A glossy Matrix collaboration client for the web.
https://element.io
GNU Affero General Public License v3.0
11.17k stars 1.99k forks source link

Web is inconsistent with Element X in terms of key storage setup #27952

Open BillCarsonFr opened 5 months ago

BillCarsonFr commented 5 months ago

The problem

Examples:

(See https://github.com/element-hq/element-internal/issues/516 )

One failure mode:

  1. Register an account on Element Web and do not "set up secure backup"
  2. Log in on Element X (which creates key backup, we think, but no 4S)
  3. The keys Web has already received and received in future are never saved to key backup.
  4. If on Web you do "set up secure backup" we are not sure what happens.

What we should do

andybalaam commented 5 months ago

@BillCarsonFr is this part of the Trust work? Should it be inside this epic? https://github.com/element-hq/element-internal/issues/540

BillCarsonFr commented 5 months ago

@BillCarsonFr is this part of the Trust work? Should it be inside this epic? element-hq/element-internal#540

It's part of the Post Force Verification improvement task element-hq/crypto-internal#306 (moved out from element-hq/crypto-internal#283)