End-to-End Encryption enabled automatically

[schiessle]

I'm just sitting in front of my computer and without interacting with the sync client this window pops up:

I didn't enabled any end-to-end encryption. Could it be triggered by someone else enabled end-to-end encryption on a shared folder?

[MorrisJobke]

I didn't enabled any end-to-end encryption. Could it be triggered by someone else enabled end-to-end encryption on a shared folder?

Just to clarify: on the server e2ee app was enabled again (was disabled in a past upgrade).

[schiessle]

normally the key creation has to be triggered by the client and the client should only trigger it once I set at least one folder to e2e not just because the app was enabled on the server

[tobiasKaminsky]

Could it be triggered by someone else enabled end-to-end encryption on a shared folder?

This should not be possible right now, as it is not supported at all.
If someone can really share a e2e folder, than this is a bug right now.

[schiessle]

Discussing this with @tobiasKaminsky I think the client detects the new capability and tries to fetch an existing key from the server, which makes sense, because if the user has some encrypted folders they want to access it. But in case there is no existing key, the initial creation should not be triggered and instead postponed until the user enabled encryption for one folder.

[tobiasKaminsky]

Now it happened to me also.
As I have 4 accounts, I now do not know for which account the mnemonic is…
--> please also include account name into this dialog

[rullzer]

There is a ticket already about this somewhere. This was how is was specified:
See https://github.com/nextcloud/end_to_end_encryption_rfc/blob/master/RFC.md#adding-an-end-to-end-encrypted-device and https://github.com/nextcloud/end_to_end_encryption_rfc/blob/master/RFC.md#further-devices

We could improve here sure. But it is not high on the list of things to fix.

[augustseptember]

@tobiasKaminsky had the same confusion about the mnemonics: #753

[jancborchardt]

Also, this should not just pop up, but only when it’s relevant. For me it showed when I connected the account, where it’s very irrelevant.

It should show only when I either want to encrypt a folder myself, or receive an encrypted folder as a share and want to open it.

Otherwise we ask people to write something down that they will not care about at that moment and then not have anymore when they really need it.

[er-vin]

Hello,

I think this issue is properly addressed with PR #1241 so closing now.

Regards.