Keep the password in the URL
We changed our minds: people do copy the URL from the bar and give that to people and expect it to work: it doesn't make sense to prioritise shorter URLs over this. There's no security advantage unless we think there's a risk someone might steal your key by taking a photo of your monitor over your shoulder and decrypting the calls they can't already hear by standing behind you.
This commit is contained in:
@@ -81,14 +81,16 @@ export function RegisteredView({ client }: Props) {
|
||||
await createRoom(client, roomName, e2eeEnabled ?? false)
|
||||
)[1];
|
||||
|
||||
const roomPassword = randomString(32);
|
||||
|
||||
if (e2eeEnabled) {
|
||||
setLocalStorageItem(
|
||||
getRoomSharedKeyLocalStorageKey(roomId),
|
||||
randomString(32)
|
||||
roomPassword
|
||||
);
|
||||
}
|
||||
|
||||
history.push(getRelativeRoomUrl(roomId, roomName));
|
||||
history.push(getRelativeRoomUrl(roomId, roomName, roomPassword));
|
||||
}
|
||||
|
||||
submit().catch((error) => {
|
||||
|
||||
Reference in New Issue
Block a user