Skip to content

Feat/security - #5

Merged
ramo-dev merged 3 commits into
mainfrom
feat/security
Oct 31, 2026
Merged

ramo-dev merged 3 commits into
mainfrom
feat/security

Conversation

@ramo-dev

Copy link
Copy Markdown
Owner

feat(omemo): decrypt locked placeholders and outgoing carbons

  • Retain ciphertext envelopes on encrypted placeholders and retry decryption
    automatically after unlock, setup, or device verification.
  • Keep incoming messages from unverified devices hidden until trust.
  • Process outgoing encrypted carbons, merge them by stanza ID with any local
    copy, and show own-device messages without requiring extra trust.
  • Add placeholder direction/carbon tests and update the backlog and changelog.

- Add Repair keys: top up pre-keys and republish the bundle/device list without
  changing identity, fingerprint, or trust.
- Add Reset OMEMO: guarded by a fresh passphrase, replaces identity/device,
  clears remembered unlock, and removes the old device from the PEP list.
  Validation happens before any key material is deleted; reset requires an
  unlocked account.
- Add a nested dialog overlay so Reset properly dims and blocks Settings.
- Balance Security settings: warnings, current state, and irreversible
  consequences stay visible; only passphrase-storage mechanics remain in a
  tooltip.
- Fix the group header encryption badge to be a real sibling button (icon-only)
  instead of a nested interactive element, and extract conversation status.
- Split OMEMO account test fixtures and maintenance helpers to keep files under
  the size limit.
- Add two-account live smoke for mutual presence, DM/group delivery, group
  invite and join, reactions including refresh restore, transcript scrolling,
  and URL-backed panel restore.
- Add static-build CSP smoke with authenticated Settings coverage.
- Run both in GitHub Actions and document local usage, browser install, and
  environment variables.
- Retain ciphertext envelopes on encrypted placeholders and retry decryption
  automatically after unlock, setup, or device verification.
- Keep incoming messages from unverified devices hidden until trust.
- Process outgoing encrypted carbons, merge them by stanza ID with any local
  copy, and show own-device messages without requiring extra trust.
- Add placeholder direction/carbon tests and update the backlog and changelog.
@ramo-dev
ramo-dev merged commit 383c025 into main Oct 31, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant