Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove email-address unconditionally from title #3507

Merged
merged 1 commit into from
Dec 18, 2024

Conversation

r10s
Copy link
Member

@r10s r10s commented Dec 18, 2024

this was discussed in-person with various ppl on the last physical gathering :)

the email-address was removed for guaranteed-e2ee chats quite a while ago (#2916) reason was, among others, that these addresses are often chatmail and therefore random. (despite expecting otherwise, that was fine for most users).

this PR removes the email-adress unconditionally:

  • having the email-address sometimes shown and sometimes not is confusing, and easily looks like a bug. this has become worse with the added vcard-support (before, there were rare non-guaranteed chats in chatmail) - resulting in more random addresses being shown

  • always protect against over-the-shoulder attacks

  • better privacy in screenshots sent around without thinking much before (cmp. Better privacy in screenshots deltachat-ios#2329)

  • wrt impersonation attacks: the pure email address in the subtitle did never protect against impersonation, one could always get sth. trustworthy looking there, it is better to check the profile with additional information (eg. other chats) if in doubt

  • general cleaner, uncluttered layout

  • pave the way of the upcoming multi-addresses

  • @adbenitez' ArcanceChat can show "Last Seen" unconditionally now (still, i am not a fan of that precise timing information in the title, but it will improve by this PR :)

drawback is that sometimes one more tap is needed to access the email-address - however, as it is always one tap away now, this can also go easily to the finger memory.

counterpart of deltachat/deltachat-ios#2447

the email-address was removed for guaranteed-e2ee chats quite a while ago
(#2916) reason was, among others,
that these addresses are often chatmail and therefore random.
(despite expecting otherwise, that was fine for most users).

this PR removes the email-adress unconditionally:

- having the email-address sometimes shown and sometimes not is confusing,
  and easily looks like a bug.
  this has become worse with the added vcard-support
  (before, there were rare non-guaranteed chats in chatmail) -
  resulting in more random addresses being shown

- _always_ protect against over-the-shoulder attacks

- better privacy in screenshots sent around without thinking much before
  (cmp. deltachat/deltachat-ios#2329)

- wrt impersonation attacks:
  the pure email address in the subtitle did never protect against impersonation,
  one could always get sth. trustworthy looking there,
  it is better to check the profile with additional information (eg. other chats) if in doubt

- general cleaner, uncluttered layout

- pave the way of the upcoming multi-addresses

drawback is that sometimes one more tap is needed to access the email-address -
however, as it is _always_ one tap away now,
this can also go easily to the finger memory.
@r10s r10s added the enhancement actually in development, user visible enhancement label Dec 18, 2024
@r10s r10s requested review from Hocuri and adbenitez December 18, 2024 17:01
@adbenitez
Copy link
Member

  • @adbenitez' ArcanceChat can show "Last Seen" unconditionally now (still, i am not a fan of that precise timing information in the title, but it will improve by this PR :)

ArcaneChat already shows the "last seen" unconditionally since that feature was introduced long time ago, good to see delta catching up, two steps ahead, I am always, two steps ahead

@r10s
Copy link
Member Author

r10s commented Dec 18, 2024

a, so ArcaneChat never showed the address in title recently? good we tried it out there :)

@r10s r10s merged commit 0c9277d into main Dec 18, 2024
2 checks passed
@r10s r10s deleted the r10s/remove-addr-from-subtitle branch December 18, 2024 17:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement actually in development, user visible enhancement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants