Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement "reset cryptographic identity" flow in new Encryption settings #28977

Open
Tracked by #26468
richvdh opened this issue Jan 13, 2025 · 1 comment
Open
Tracked by #26468
Labels
A-E2EE A-E2EE-Cross-Signing A-User-Settings T-Feature Request to add a new feature which does not exist right now

Comments

@richvdh
Copy link
Member

richvdh commented Jan 13, 2025

Part of #26468

This issue tracks the implementation of the "Reset cryptographic identity" flow in our designs for the new "Encryption" settings tab.

Our designs for the "Advanced" section of the Encryption settings tab includes a "Reset cryptographic identity" link (Figma design). The link takes you to a confirmation screen (Figma).

Clicking "Continue" on the confirmation screen should:

  • Disable backing up room keys and delete the active backup
  • Remove the account data entries for secret storage (ie, disable recovery)
  • Create a new cross-signing identity and publish the public keys
  • Assuming backup was previously enabled, re-enable it with a new keypair.

In other words, it should do the same as matrix_sdk::encryption::recovery::Recovery::reset_identity in the Matrix Rust SDK.

[Note that it does more than "reset identity". The UI refers to it as "Reset cryptographic identity" for consistency with EX, but we should avoid propagating the confusion in new code.]

After the reset, we now have no recovery, so we return to the basic Encryption tab which prompts you to "Set up Recovery".

We have agreed to add a new method CryptoApi.resetEncryption to matrix-js-sdk which will implement the reset mechanics.

Internal discussion

@richvdh
Copy link
Member Author

richvdh commented Jan 13, 2025

matrix-org/matrix-rust-sdk#4502 is about a bug in reset_identity that we should avoid reproducing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE A-E2EE-Cross-Signing A-User-Settings T-Feature Request to add a new feature which does not exist right now
Projects
None yet
Development

No branches or pull requests

1 participant