I’m Bob and i scanned Alice’s QR code, but haven’t yet received vc-contact-confirm. I see a chat with Alice with green checkmark, if i enter the chat, i also see green checkmark. If i tap on Alice (above the chat), i see their contact with green checkmark and “Introduced by me”. But if i tap on + in the main window (to create a new chat), i see Alice w/o green checkmark.
Also i can’t add Alice to verified groups. Afaiu the idea is that Alice may not have me verified, so it’s not reliable to add Alice to verified groups. At the same time i can send messages to Alice which is also not reliable, but afaiu this is a way to resolve this situation somehow, e.g. by rescanning their QR code. This is just for the record.
The same behaviour i see in DC Desktop. I think that the green checkmark should be shown everywhere for consistency, but when adding such Alice to a verified group, just don’t allow to select them, maybe with the same explanation message as currently.
It seems that currently dc_contact_is_verified() is used for that on Android/Desktop, but this call also checks backward verification. But backward verification only matters when adding the contact to verified groups. Seems it should be renamed to dc_contact_is_verified_for_groups() or smth like this, and a new dc_contact_is_verified() should only check forward verification because it’s sufficient to have a protected 1:1 chat. Then the only place where only forward-verified Alice is shown w/o a green checkmark is the “Add Members” window which is fine.