Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add an option to not send Talk message contents via email #13989

Open
MegadoomerX opened this issue Dec 12, 2024 · 1 comment
Open

Add an option to not send Talk message contents via email #13989

MegadoomerX opened this issue Dec 12, 2024 · 1 comment

Comments

@MegadoomerX
Copy link

How to use GitHub

  • Please use the 👍 reaction to show that you are interested into the same feature.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Feature request

Which Nextcloud Version are you currently using:
29.0.9

Is your feature request related to a problem? Please describe.
In the default configuration, Nextcloud Talk will send chat messages unencrypted via email.

This is a problem, because all Talk apps use some form of transport encryption to protect sensitive information and the web app uses encrypted webRTC, however sensitive info is then sent unencrypted via email if not read in a timely manner, vulnerable to interception by other parties: Man-in-the-middle attackers, email server hosts, etc.

Describe the solution you'd like
Add a global setting to prevent Talk messages (contents) to be sent via email. There appears to be no setting like this currently.

Describe alternatives you've considered
Sending encrypted emails is not viable for most users, therefore the only solution is to not sent Talk messages (contents) altogether.

@nickvergessen nickvergessen changed the title [Security]: Add an option to not send Talk message contents via email Add an option to not send Talk message contents via email Dec 13, 2024
@nickvergessen
Copy link
Member

Before that we should add upstream an option so that apps can know if they do things to prepare an email or a normal notification

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants