Remix.run Logo
hedora 5 hours ago

I don’t use Matrix, but if it’s E2EE, then how is it possible in the current design for an unverified device to even exist?

It has the keys, or it doesn’t, right?

kevincox 5 hours ago | parent | next [-]

Matrix has E2EE support and many clients are pushing it as the default. But it also supports rooms that are only encrypted in transit.

prophesi 4 hours ago | parent [-]

That's correct, but E2EE also allows for unverified devices[0]. Key distribution and device verification are separate issues, and the former doesn't enforce the latter until April 2026 as they've announced in the HN article.

[0] https://matrix.org/docs/matrix-concepts/end-to-end-encryptio...

bigstrat2003 2 hours ago | parent | prev [-]

You don't have to use E2EE if you don't want to. I personally don't because I don't care about it, and it adds extra difficulties to the experience.