d3v1l/matrixion
1
0
Fork 0
mirror of https://github.com/Nheko-Reborn/nheko.git synced 2024-11-22 19:08:58 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Trust key forwards from the original sender

Browse source
This commit is contained in:
Nicolas Werner 2021-08-20 14:00:16 +02:00
parent 71a153538f
commit 5416988057
No known key found for this signature in database
GPG key ID: C8D75E610773F2D9
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
src/Olm.cpp
View file

@ -835,6 +835,13 @@ import_inbound_megolm_session(
data.sender_claimed_ed25519_key = roomKey.content.sender_claimed_ed25519_key;
// may have come from online key backup, so we can't trust it...
data.trusted = false;
// if we got it forwarded from the sender, assume it is trusted. They may still have
// used key backup, but it is unlikely.
if (roomKey.content.forwarding_curve25519_key_chain.size() == 1 &&
roomKey.content.forwarding_curve25519_key_chain.back() ==
roomKey.content.sender_key) {
data.trusted = true;
}
cache::saveInboundMegolmSession(index, std::move(megolm_session), data);
} catch (const lmdb::error &e) {