quarkslab / mattermost-plugin-e2ee

End-to-end encryption plugin for Mattermost
Apache License 2.0
65 stars 8 forks source link

The ability to enable channel encrytion should be configurable #16

Open wiebel opened 2 years ago

wiebel commented 2 years ago

In channels it could be problematic to force every participant into using e2ee. Also anybody being able to disable encryption at will, could pose a security risks. So it would be nice to have the ability to toggle e2ee in channels configurable. Ideally on a per channel base.

aguinet commented 2 years ago

The per-channel encryption toggle has proven being a good tradeoff for us so far.

About the fact that it's a security risk to let everyone the power of changing that status, it is mitigated by two things:

That being said, we could add an option to only let administrators the ability to change encryption status, but it's not in our priorities yet.

We would though be happy to review any PR that would implement it.