Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarifying e2e encryption mnemonic description and usage on clients devices #205

Closed
sunjam opened this issue Oct 1, 2020 · 1 comment
Closed
Labels
0. Needs triage Pending approval or rejection. This issue is pending approval. enhancement New feature or request feature: activation Setting the mnemonic mostly

Comments

@sunjam
Copy link

sunjam commented Oct 1, 2020

Originally posted to Desktop client repo, but should more likely be reported to this main repository. edit: It seems people can recover the mnemonic directly from any authenticated client device. I hope this changes via #2443. ❤️

Related to nextcloud/documentation#11274 for e2e documentation on Nextcloud desktop client. Revoke Keys discussion and issue for better overall documentation.

Please considering designing mnemonics so that will only be shown that singular time, and will disappear forever once you select Enable encryption.

a5f57688e6e91b1ec7573180b5943cfdc8778f06

I appreciate the wording you have on 3.0.1, but it is not secure enough. Thanks for considering.
e8d76bb78f7d03e9995b0f16b1d56ccdaecba588

To protect your Cryptographic Identity, we encrypt it with a mnemonic of 12 dictionary words. You must record and never lose these 12 words. These will never be shown again once enabled and are required in case you ever lose access to your data or wish to add other devices to your account (like your mobile phone or laptop). Have you recorded these words? Record them carefully then Enable encryption.

@sunjam sunjam added 0. Needs triage Pending approval or rejection. This issue is pending approval. enhancement New feature or request labels Oct 1, 2020
@joshtrichards joshtrichards added the feature: activation Setting the mnemonic mostly label Nov 10, 2023
@joshtrichards
Copy link
Member

We have no interaction with the mnemonic in this repository. All of the other matters noted have their own Issues elsewhere. Closing here as a duplicate of nextcloud/desktop#2442

@joshtrichards joshtrichards closed this as not planned Won't fix, can't repro, duplicate, stale Jan 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0. Needs triage Pending approval or rejection. This issue is pending approval. enhancement New feature or request feature: activation Setting the mnemonic mostly
Projects
None yet
Development

No branches or pull requests

2 participants