Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

e2e chats allow non-encrypted chats to be sent #15095

Open
dswebbthg opened this issue Aug 2, 2019 · 3 comments
Open

e2e chats allow non-encrypted chats to be sent #15095

dswebbthg opened this issue Aug 2, 2019 · 3 comments

Comments

@dswebbthg
Copy link

Description:

Encrypted channels allow users to send non-encrypted text

Steps to reproduce:

  1. create an encrypted channel with only yourself as the user
  2. send message via app that supports e2e, result = encrypted message
  3. login via android app (which seemingly doesn't support e2e), send message in channel. message is sent unencrypted and can be seen on the thick client

Expected behavior:

disallow sending of non-encrypted messages on encrypted channels

Actual behavior:

allows sending of non-encrypted messages

Server Setup Information:

  • Version of Rocket.Chat Server: 1.2.3
  • Operating System: CentOS 7.6
  • Deployment Method: docker
  • Number of Running Instances: 1
  • DB Replicaset Oplog: n/a
  • NodeJS Version: n/a
  • MongoDB Version: n/a

Additional context

Relevant logs:

@reetp
Copy link

reetp commented Aug 2, 2019

Android app does not currently support encryption. It is on the roadmap:

RocketChat/Rocket.Chat.Android#566

However, I am not sure you should be able to send a plain message in an encrypted channel.

@dswebbthg
Copy link
Author

In my opinion encrypted chats shouldn't allow any non-encrypted messages, but it definitely does right now.

@milton-rucks
Copy link

Expected to be solved in 6.8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants