element-web icon indicating copy to clipboard operation
element-web copied to clipboard

"Upgrade your encryption" flow is broken and should be removed

Open richvdh opened this issue 9 months ago • 3 comments

If we detect that you have key backup, but no 4S, we pop up a toast prompting you to "Upgrade your encryption".

This is broken in several ways:

  • We also show the toast in the situation that you have 4S, but the backup key is not stored in 4S [at least, not under the current 4S key]: see https://github.com/element-hq/element-web/issues/27100#issuecomment-2101113562. This is not a situation we can "upgrade" from.
  • Generally, I don't think this is tested and I'm not convinced it works at all. Certainly it doesn't report any failures correctly (see https://github.com/element-hq/element-web/issues/27383).

Frankly, I don't think this is a flow we should be supporting at all. We should remove the "upgrade your encryption" flow. However, if it's something that we want to keep, then it needs tests and we need to fix the bugs above.

richvdh avatar May 09 '24 11:05 richvdh

After discussion with the team today: we're agreed that this flow should be removed altogether. When logging into an account that has key backup but the keys for that backup are not available in 4S, the only option will be to create a new key backup.

richvdh avatar May 13 '24 16:05 richvdh

If we're removing the "upgrade" flow, we should also remove the behaviour in RestoreKeyBackupDialog which prompts you to enter your backup key directly (referring to it, confusingly, as "security key"). Related: https://github.com/element-hq/element-web/issues/27469

richvdh avatar Jun 11 '24 13:06 richvdh

Hi there, every new user on our on prem instance is unable to have a correct key backup at first login, is there a workaround ? It's not occasionally for us, it's every time.

crjo avatar Jun 18 '24 07:06 crjo

@richvdh So what do we need to do "If we detect that you have key backup, but no 4S" instead of showing this broken flow?

florianduros avatar Oct 24 '24 09:10 florianduros

Treat it the same as having no 4S (and no key backup), imho

richvdh avatar Oct 24 '24 09:10 richvdh