Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unintentional logout should allow key backup #1419

Open
TheJJ opened this issue Apr 12, 2019 · 2 comments
Open

Unintentional logout should allow key backup #1419

TheJJ opened this issue Apr 12, 2019 · 2 comments

Comments

@TheJJ
Copy link

TheJJ commented Apr 12, 2019

Description

When, for whatever reason, one is logged out (password change element-hq/element-web#2671, funny security incidents, ...), riot-web should provide the possibility to download the E2E keys.

Steps to reproduce

  • Use Riot with E2E-Rooms
  • Wait to be logged out
  • Discover that you did not set up/create key backup etc
  • E2E data can't be exported conveniently since one is logged out

Steps to fix

  • Add some UI displayed after an unintentional logout to export E2E keys
@TheJJ TheJJ added the T-Defect label Apr 12, 2019
@exuvo
Copy link

exuvo commented Apr 12, 2019

With the recent matrix.org security breach I too was forced to re-login, but the desktop client then forgets all the room keys which is weird as those should already be stored locally at that point?

Describe the solution you'd like
Allow for exporting keys before the client does a forced logout.

Workaround
I was forced to restore my riot data directory from backups and restart riot with internet disabled (which keeps the client from logging me out instantly) to be able to export the E2E room keys.

@xloem
Copy link

xloem commented Apr 12, 2019

Note that if you have no backup an individual with experience in data-recovery or a tool such as autopsy should be able to recover the keys, if the computer is not left powered on for too long after the incident.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants