Dehydrated devices: when resetting SSSS, if some prior step fails, we won't reset device dehydration #29084
Labels
A-E2EE-Dehydration
O-Uncommon
Most users are unlikely to come across this or unexpected workflow
S-Minor
Impairs non-critical functionality or suitable workarounds exist
T-Defect
ref matrix-org/matrix-react-sdk#12316 (comment)
Device dehydration is set up after cross-signing and key backup. If there is an error setting up one of those during SSSS reset, then dehydration will not be reset. In particular, there may be a dehydrated device encrypted with an old dehydration key, and so will not be able to be decrypted unless the user has access to the old SSSS key (which, if they reset SSSS, they probably don't).
The text was updated successfully, but these errors were encountered: