3 ms·
https://element.io/en/help#encryption-device-verification https://element.io/en/help#encryption-device-verification > After Alice logs in on a new device, she
by totetsu 11mo ago
https://element.io/en/help#encryption-device-verification https://element.io/en/help#encryption-device-verification
> After Alice logs in on a new device, she uses her cryptographic identity to demonstrate to Bob that the new device genuinely belongs to her, rather than being added by someone else with access to her account. She can do this either by entering her recovery key (which gives the new device immediate access to her cryptographic identity ), or by carrying out an interactive verification from an existing verified device.
- navigate8310 11mo agoSo is this like the Signal PIN which is required when installing on a new device? If you forget, the cryptography changes and old contacts are warned that signatures are rotated, right?
- kevincox 11mo agoYes, the purpose is the same but the UX is a bit different.
- Lerc 11mo agoQuite. I have yet to manage a verification between clients. I have had all variations of clients ignoring requests, reporting requests only for the requesting client to ignore the response. Both ends quitting declaring that the other end cancelled, asking for the other end to input a code while the other end shows no interface for doing so. It marked the end of me using Matrix as a platform. I'd go back to the old IRC channels if there were anyone still there.
- rebolek 11mo agoIf by bit different you mean absolute nightmare then yes
- tcfhgj 11mo agoimho it's the best out there - no unnecessary coupling to a phone client - no coupling to any other client - I can just put my recovery key in and be verified without having to deal with other apps.
- octoberfranklin 11mo agoMore like the safety number / QR code. The numerical Signal PINs are basically just for when you bootstrap your Signal identity from a telephone number.
- jojobas 11mo agoExcept Signal PIN appears to be trivial to bruteforce for Signal itself, unlike this properly secure verification.