Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bundle Element Call with Element Web/Desktop #23908

Open
robintown opened this issue Dec 5, 2022 · 1 comment · May be fixed by #29309
Open

Bundle Element Call with Element Web/Desktop #23908

robintown opened this issue Dec 5, 2022 · 1 comment · May be fixed by #29309
Assignees
@t3chguy
Labels
A-Element-Call Group calls via Element Call O-Occasional Affects or can be seen by some users regularly or most users rarely Privacy T-Enhancement Z-Labs

Comments

@robintown
Copy link
Member

Your use case

What would you like to do?

Bundle Element Call with Element Web/Desktop

Why would you like to do it?

  • So that group calls in Element can work in airgapped environments
  • So that old versions of Element are guaranteed to use a version of Element Call that they're compatible with
  • So that Element Desktop doesn't contact any "external" servers when joining group calls

How would you like to achieve it?

Add Element Call as a dependency of Element Web/Desktop, and integrate it into the build process

Have you considered any alternatives?

Not doing this to keep the implementation simple, and showing a dialog disclosing that the Element Call instance will be fetched when joining a call for the first time to address the privacy concerns

Additional context

No response
@robintown robintown added T-Enhancement Privacy O-Occasional Affects or can be seen by some users regularly or most users rarely A-Element-Call Group calls via Element Call labels Dec 5, 2022
@github-actions github-actions bot added the Z-Labs label Dec 5, 2022
@robintown robintown mentioned this issue Dec 5, 2022
Closed
@DemiMarie
Copy link

To me, this is the only way to get proper end-to-end encryption. Otherwise the Element Call server must be trusted, which violates the end-to-end encryption threat model.

Downloading on first use might work, but only if the downloaded file was signed and the signature was checked, with proper downgrade protection.

@robintown robintown mentioned this issue Jan 10, 2025
Closed
@t3chguy t3chguy linked a pull request Feb 18, 2025 that will close this issue
Draft
@t3chguy t3chguy self-assigned this Feb 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@t3chguy t3chguy

Labels
A-Element-Call Group calls via Element Call O-Occasional Affects or can be seen by some users regularly or most users rarely Privacy T-Enhancement Z-Labs
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Bundle Element Call with Element Web packages element-hq/element-web
3 participants
@t3chguy @DemiMarie @robintown