You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Please use the 👍 reaction to show that you are interested into the same feature.
Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
Subscribe to receive notifications on status change and new comments.
Feature request
Which Nextcloud Version are you currently using:
29.0.9
Is your feature request related to a problem? Please describe.
In the default configuration, Nextcloud Talk will send chat messages unencrypted via email.
This is a problem, because all Talk apps use some form of transport encryption to protect sensitive information and the web app uses encrypted webRTC, however sensitive info is then sent unencrypted via email if not read in a timely manner, vulnerable to interception by other parties: Man-in-the-middle attackers, email server hosts, etc.
Describe the solution you'd like
Add a global setting to prevent Talk messages (contents) to be sent via email. There appears to be no setting like this currently.
Describe alternatives you've considered
Sending encrypted emails is not viable for most users, therefore the only solution is to not sent Talk messages (contents) altogether.
The text was updated successfully, but these errors were encountered:
nickvergessen
changed the title
[Security]: Add an option to not send Talk message contents via email
Add an option to not send Talk message contents via email
Dec 13, 2024
How to use GitHub
Feature request
Which Nextcloud Version are you currently using:
29.0.9
Is your feature request related to a problem? Please describe.
In the default configuration, Nextcloud Talk will send chat messages unencrypted via email.
This is a problem, because all Talk apps use some form of transport encryption to protect sensitive information and the web app uses encrypted webRTC, however sensitive info is then sent unencrypted via email if not read in a timely manner, vulnerable to interception by other parties: Man-in-the-middle attackers, email server hosts, etc.
Describe the solution you'd like
Add a global setting to prevent Talk messages (contents) to be sent via email. There appears to be no setting like this currently.
Describe alternatives you've considered
Sending encrypted emails is not viable for most users, therefore the only solution is to not sent Talk messages (contents) altogether.
The text was updated successfully, but these errors were encountered: