E2E Epic

[lampholder]

There's a big list of E2E improvements we want to make in Riot across all platforms.

Our general approach (where possible) will be to tackle the E2E technical and UX challenges in web first, then when we're confident in our understanding translate this into mobile.

Some design tasks will require consideration of web and mobile UX simultaneously.

MILESTONE 1

• E2E key backup 'back end' (aka all the stuff Hubert and Dave have been doing so far)
• Recovery Setup
• User Account Settings
• Registration and Login
• Room Settings

MILESTONE 2

• Verifying Users
• Security Notifications
• Bi-directional user verification
• Cross-sign on login

MILESTONE 3

• Passphrase suggestions
• Consider cycling back to registration and applying password strength validation to account creation

[nadonomy]

Now tracking wireframes & feedback in this related doc, which follows the order of work of this epic:

https://docs.google.com/document/d/1TIZarCxP0UHcn52o3YdKrFs_ESB3YvDxvCY_SoY-FUk/edit?usp=sharing

[dbkr]

Notes from IRL discussion that out MVP (new milestone 1) is:

• Current key backup stuff (we have all this)
• Prompt to set up key backup on login/register if one doesn't exist
• Prompt to verify device if there's a key backup but we can't use it
• Log out warning