Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] <title>Show some sort of picture like a key on a person's ID circle, to show that they have Session password-protected on their end #3264

Open
1 task done
as-muncher opened this issue Dec 24, 2024 · 4 comments
Labels
enhancement New feature or request

Comments

@as-muncher
Copy link

Is there an existing request for feature?

  • I have searched the existing issues

What feature would you like?

I would like to see if a person has password-protected Session on his end. That way I know that it is more secure for our conversations. What good is all this encryption if the front door is unlocked?

Anything else?

No response

@as-muncher as-muncher added the enhancement New feature or request label Dec 24, 2024
@KeeJef
Copy link
Collaborator

KeeJef commented Jan 6, 2025

There needs to be a balance between user privacy and signaling. I think revealing information about how other clients are configured by indicating that they have a password set might lean a little too heavily on signaling over user privacy.

@as-muncher
Copy link
Author

@KeeJef If someone's Session is configured in a rather insecure way, that affects my security too. I can't come out and ask someone if they have their Session password-protected: it's too easy to just say yes or no.

@keybreak
Copy link

keybreak commented Jan 8, 2025

See....Missing password protection is a possibility for security / privacy problem, however there are much more significant threats that you should be warned about, but clearly never will, because it will ScArE uSeRS on reality of our situation.

  • Microsoft Pluton is a chip-to-cloud backdoor inside pretty much 100% of all modern desktop and mobile CPUs.
    Which means that you can NOT guarantee safety of your contacts, unless you personally know for a fact that contact and yourself are using older CPU released before 17 November 2020, RISC-V (and make sure it's implementation is 100% open-source), or if it's mobile Google Pixel with GrapheneOS installed.
  • Microsoft Windows 11 - is a 100% guarantee that all of your communications and passwords will be spied on through AI.
  • Apple MacOS & iOS - is a 100% guarantee that all of your communications and passwords will be spied on through AI.

tl;dr even if you're using older CPU desktop with Linux and Google Pixel with GrapheneOS, like myself - it's nearly impossible that any of your contact will, so assume your communications are not safe by default, regardless of which messenger is used .

@as-muncher
Copy link
Author

What happened to @n-c0de-r's post?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants