-
-
Notifications
You must be signed in to change notification settings - Fork 2.5k
"Never send encrypted messages to unverified devices in this room from this device" seems to be ignored if enabled #9235
Description
Description
If I enable the security option "Never send encrypted messages to unverified devices in this room from this device" for an encrypted room I can choose "send anyway" in the "unknown devices" warning and the message will be send.
Steps to reproduce
- Enable encryption for a room.
- Enable "Never send encrypted messages to unverified devices in this room from this device" for this room.
- Send a message. There should be a "unknown devices" warning. Choose "send anyway".
Describe how what happens differs from what you expected.
The message should not be send. There should be an info message instead saying something like:
"You have activated "Never send encrypted messages to unverified devices in this room from this device" in the security settings of this room and have not verified any recipients devices. Verify at least one recipient device to allow Riot to deliver your message to verified devices."
Version information
- Platform: desktop
For the desktop app:
- OS: GNU/Linux Debian
- Version: 1.0.4
Edit: I have to correct my issue description a little bit although the given issue description is not wrong: Messages sent via "send anyway" are shown as "Unable to decrypt: The sender's device has not sent us the keys for this message.".
After I verified the fingerprint of the recipients device the message was readable for the recipient. So the bug seems unfortunately not to be a security problem but anyway very irritating (a message in such a room shouldn't be delivered at all).