You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As a "security savy" person, I would like to be able to get more information about a user identity change notice.
This banner will from time to time appear in a room. And some users will see it or not depending on how long they know that user. And even a user that has multiple sessions of different age might see the banner on some devices but not others.
You also have to open a room the user is in to see it. So it is possible that you see the banner long after the identity change.
All of that makes it difficult for a security concerned user to learn a bit more on that identity change.
The best way to fix it would be to actually verify that person, but this person might be offline or not available to do the interactive verification. (note that some non tech-savy people sometimes don't remember if they did something related to their identity)
With a bit more information, an advanced user with other members could try to audit a bit and check if the change is ~sane.
How would you like to achieve it?
On the user Profile Screen, add a new advanced section called encryption.
In this section we want to show the user identity, a base64-encoded string for the master key similar to how device keys
E.g.
Adds a first time seen formatted date for that identity.
And finally a tap on the user name from the banner should open the user profile page
=> Just these information could allow me to check across my sessions and with other users that we see the same identity and also compare the time of when the change was detected
Have you considered any alternatives?
No response
Additional context
No response
The text was updated successfully, but these errors were encountered:
Your use case
What would you like to do?
As a "security savy" person, I would like to be able to get more information about a user identity change notice.
This banner will from time to time appear in a room. And some users will see it or not depending on how long they know that user. And even a user that has multiple sessions of different age might see the banner on some devices but not others.
You also have to open a room the user is in to see it. So it is possible that you see the banner long after the identity change.
All of that makes it difficult for a security concerned user to learn a bit more on that identity change.
The best way to fix it would be to actually verify that person, but this person might be offline or not available to do the interactive verification. (note that some non tech-savy people sometimes don't remember if they did something related to their identity)
With a bit more information, an advanced user with other members could try to audit a bit and check if the change is ~sane.
How would you like to achieve it?
On the user Profile Screen, add a new advanced section called encryption.
In this section we want to show the user identity, a base64-encoded string for the master key similar to how device keys
E.g.
Adds a
first time seen
formatted date for that identity.And finally a tap on the user name from the banner should open the user profile page
=> Just these information could allow me to check across my sessions and with other users that we see the same identity and also compare the time of when the change was detected
Have you considered any alternatives?
No response
Additional context
No response
The text was updated successfully, but these errors were encountered: