Skip to content

Inviting a user to an E2EE room does not share keys for history with them, causing UISIs everywhere. #1496

@ara4n

Description

@ara4n

Steps to reproduce

  1. In EX, Invite a user to an E2EE room.
  2. The user accepts the invite
  3. They never receive the keys for the shared history, so will not be able to catch up on history.
  4. EX will show these messages as UISIs rather than surpressing them.

Outcome

What did you expect?

If you invite a user to a room, you should share them the keys they need to decrypt the messages they have permission to. (RHUL might have undermined this, given it lets malicious servers fake invites to steal keys, in which case we might instead need to wait until we have client-controlled group membership).

What happened instead?

UISIs everywhere.

Your phone model

No response

Operating system version

No response

Application version

343

Homeserver

No response

Will you send logs?

No

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-E2EEEncryptionA-TimelineO-FrequentAffects or can be seen by most users regularly or impacts most users' first experienceS-MajorSeverely degrades major functionality or product features, with no satisfactory workaroundT-EnhancementNew features, changes in functionality, performance boosts, user-facing improvementsX-Needs-RustThis issue needs a Rust SDK change. It must have a link to a Rust SDK issue

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions