This repository has been archived by the owner on Sep 11, 2024. It is now read-only.
Add option to persist security key on platform #11776
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds a
feature_persist_ssss_key
feature flag. When enabled,element-desktop
tries to save any generated security key in the login keyring, similar to pickle keys. It automatically uses them for unlocking the backup. See also element-hq/element-web#26405 and element-hq/element-desktop#1286.Goals
With this PR, we try to work towards user-friendly encryption key backups while preserving e2ee security. In our small/medium non-profit org, many members lack a technical background. Using element as-is without losing keys would be quite a challenge for them.
Since we might not be the only org struggling with secure backup/key management in practice (https://github.com/vector-im/element-web/issues/20046), we would like to contribute to Element.
This PR and the whole feature are experimental and we would love to receive comments or feedback.
Checklist
Notes: none
element-web notes: none
element-desktop notes: Add option to persist security key
Type: enhancement
This change has no change notes, so will not be included in the changelog.