Invisible Crypto: A clearer message to the user when sending fails due to their own unverified devices

[mxandreas]

Description

On our way to invisible crypto (in which all users devices are either fully verified or fully ignored) we have implemented a stop-gap solution for security purposes:

Given Alice has explicitly verified Bob's identity
And Bob has unverified devices
When Alice is trying to send a message to Bob
Then The message fails to send
And Bob needs to take an action to decide what will happen next.

The visuals look as follows:

It was not realized that the same will happen when Alice == Bob, meaning that user's own devices aren't verified. For security reasons this needs to remain, as otherwise one could inject a device on behalf of the user and start listening to their messages without the user noticing that. However, to make this more user friendly, the text of the message to the user should be changed so that it is clearer for them what is happening.

Proposed copy of the message when its the user's own device that is unverified.

Title: Your message was not sent because you have not verified one or more of your devices
Description: One or more of your devices are unverified. You can send the message anyway, or you can cancel for now and try again later after you have verified all of your devices.

Links to the design in Figma for convenience.

Acceptance criteria

• User can see the tailored error message when one or more of their own devices are unverified.

Leads

• Tech:
• Design:

Size estimate

None

Dependencies

• None

Out of scope

• Nothing

Open questions

Questions

Beta Give feedback

No tasks being tracked yet.

Subtasks

Android

Beta Give feedback

1. [Task] A clearer message to the user when sending fails due to their own unverified devices element-x-android#3484
   T-Task +1
   

iOS

Beta Give feedback

1. [Task] A clearer message to the user when sending fails due to their own unverified devices element-x-ios#3350
   T-Task +1

Rust

Beta Give feedback

No tasks being tracked yet.

Other

Beta Give feedback

No tasks being tracked yet.

Sign-off

Android

• Design sign-off on completion
• QA sign-off on completion
• Product sign-off on completion

iOS

• Design sign-off on completion
• QA sign-off on completion
• Product sign-off on completion

[mxandreas]

@americanrefugee Could you please review the copy I suggested and then add the corresponding variant also into Figma. If you need further clarifications, let me know.

[americanrefugee]

Here is the design for iOS and Android

[manuroe]

The update has been done both on Android and iOS. It was part for the releases we made for the Matrix Conf. Can we close this issue?

[mxandreas]

Done