You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Resetting cross signing (bootstrap), will in most case require the user to enter their account password (to upload the new keys), and 4S passphrase to update the account data.
Currently this is not atomic, we first reset the keys locally then update 4S, then upload keys.
So if the user forgot their password/key the account will end up in a broken state, with local secrets not uploaded to server
richvdh
changed the title
Element-R: resetting cross signing is not resistent to forgotten account password & 4S passphrase
Element-R: resetting cross signing is not resistant to forgotten account password & 4S passphrase
Jan 24, 2024
richvdh
changed the title
Element-R: resetting cross signing is not resistant to forgotten account password & 4S passphrase
Element-R: aborting cross-signing reset leaves the account in a broken state
Jul 23, 2024
From https://github.com/vector-im/crypto-internal/issues/154:
Resetting cross signing (bootstrap), will in most case require the user to enter their account password (to upload the new keys), and 4S passphrase to update the account data.
Currently this is not atomic, we first reset the keys locally then update 4S, then upload keys.
So if the user forgot their password/key the account will end up in a broken state, with local secrets not uploaded to server
cc @BillCarsonFr
The text was updated successfully, but these errors were encountered: