MSC3834: Opportunistic user key pinning (TOFU)

[duxovni]

Rendered

[maralorn]

This is great! Thank you for pushing TOFU. I am though not sure that it’s acceptable UI to have this enabled by default. I suggest that clients targeting a large user base should only activate the warnings if the user has somehow demonstrated that they understand key signing, by either manually verifying a key or enabling an option in the settings. One could even consider a setting where users manually need to activate TOFU per user.

I think showing users who don‘t understand E2E warnings they don‘t understand (like Signal does) desensitizes them for security warnings and is bad UX.

I have already voiced my opinion in element-hq/element-meta#1557 (which I know see you self assigned, so I will stop here.)

Thanks for taking this on!!!