Skip to content

Config flag to disable Secure Backup upload #18807

@jaller94

Description

@jaller94

Your use case

What would you like to do?

  • Not uploading keys to Secure Backup.
  • Not having to provide a password when restoring Secure Backup.

secure-backup-restore-requires-password

Why would you like to do it?

  • Because I know another Matrix client receives and uploads all keys.
    • Appservices can get an access token for an account without having to register a password for it. (merged MSC2778)
    • If a human wants to log in to such an account, the appservice can provide an access token but no password.
    • Uploading keys to Secure Backup isn't important, if the account is commonly managed and backed up by a bot.

How would you like to achieve it?

  • A config flag disableSecureStorageUpload (boolean, defaults to false).
    • You can still restore Secure Backup but it will be read-only.

Have you considered any alternatives?

A config flag to disable all flows which require an account password and use the access token where possible or disable features. (e.g. changing the password)

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-E2EE-Key-BackupO-UncommonMost users are unlikely to come across this or unexpected workflowS-MinorImpairs non-critical functionality or suitable workarounds existT-Enhancement

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions