Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option to exclude insecure devices for Olm traffic, to be consistent with megolm sharing? #4147

Open
BillCarsonFr opened this issue Oct 17, 2024 · 1 comment

Comments

@BillCarsonFr
Copy link
Member

BillCarsonFr commented Oct 17, 2024

Following the work on invisible crypto it is now possible to exclude devices not signed by their owner from participating in encrypted room:

We also have an API to encrypt a message directly to a device (using olm):

/// Encrypt the given content for this `Device`.
///
/// # Arguments
///
/// * `content` - The content of the event that should be encrypted.
pub(crate) async fn encrypt(

This can lead to a strange situation when the exclude insecure devices option is enabled and:

  • Sharing a room key won't work for a given device
  • Encrypting directly to this device would work

Maybe we would want to use some EncryptionSetting/DecryptionSetting for olm traffic?
Notice that we also don't look at the device trust status BlackListed/Ignored when encrypting in olm

@fkwp
Copy link

fkwp commented Oct 17, 2024

@toger5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants