Show varying levels of authentication in contact profile pages

[Low]

Expected behavior

When I tap on a contact’s profile page, I want to see the level of authentication they have.

Someone that I added through scanning a QR code in person should be more secure than someone I added just through a link. And the person I added through a link should be more secure than someone in the same group chat as me that I don’t know at all.

And we should have the ability to change a contact’s level of authentication. “Upgrade” them by getting a link or by scanning a QR code.

Actual behavior

There’s no real info on their profile about how I added them at all. It just says “introduced by me” with a green check (which doesn’t even make sense in the context of a 1-on-1 chat). And the Encryption Info shows keys I guess?

Something in the UI that shows security level simply like that would be more helpful. And it could even encourage users to scan each others’ QR codes.

Example Images

I show here how Threema handles this with three levels Verified group with far away members - #6 by Low

It could be for Delta something like:

• green (scanned QR code)

• yellow (added from link)

• red (in same group chat without getting link or scanning

[ian]

Related:

Separate collected contacts from the "contact list"

Delta Chat currently has a single contact list. Contacts are added there from all groups you participate in. While incoming chat is in the “contact request” state, its members are not added, but as soon as you accept it or send a message there (e.g. from another device), all members are added to your contact list. Similarly, joining a group or channel via QR code or invite link adds the inviter to your contact list. Users have many times requested that Delta Chat does not add group members to t…

Please do not automatically add everyone to the address book when entering the group again

When I joined a new groupAll members will be added to the address book，But I don’t want to add the contact list of all group members,Especially in large group chats.That experience is too bad

I did not add to the contacts, the members of the groups

Currently delta.chat is automatically added group members to contacts, I consider this an error. We are talking about privacy all the time and this, I consider, can say that this is lack of privacy. Someone can add me to a group and as it is not of my interest I go out but already all the members of the group have my email in their contacts.

Don't add every mail address to the adress book

If I’m not wrong, DC adds every Email it gets to the Address book including CC Mail addresses?! Can we have an option to only add TO Email-Addresses to the adress book? The Problem for some people here (at university) is, that a lot of Mails containing a lot of CC adresses … but they will almost never write with them in DC directly. So some users “complained” they have hundreds to thousands of contacts containing (also external) addresses they don’t need. Maybe even add TO Adresses only (with…

Favourite contacts

Make possible to favourite contacts will allow users to easily identify they real contacts from contacts automatically added from a group, or that users don’t use to talk to. Favourite contacts will be shown at the top of the list in the contacts list. Initially all contacts in the phone’s contacts will be marked as favourite.

Show provenance of contact in contact's profile view

I think 0.20 did something like this or at least it shows the active chats where this person is, I am getting a lot of addresses I don’t know from where they came, it is useful to know from what chat an address was added to my contact list.

[ell1e]

Related technical question, but is there a difference between QR and link right now? I don’t think there is, I thought the QR contains the exact same link. And some devices don’t have cameras. That makes me wonder how one would meaningfully differentiate those two in a way that works for all users.

[Minim]

Presumably your client knows whether you pasted the QR code or URL into the client, or scanned it with the camera? The latter is likely to be in-person. A manual override would be needed; for instance, I have photographed a QR code in-person and then copy-pasted just because DeltaTouch does not interoperate with my camera. Still an in-person introduction.

Does it ever say “introduced by [group]”?

[ell1e]

Right, I totally agree with manual override, but then I think it makes more sense to just ask the user how the code was obtained. Like I suggested here: Trust design: perhaps an invite link shouldn't always be trusted (maybe it's a good idea to ask the user?) - #47 by ell1e This is then independent of whether the camera was used or not.

[Minim]

Yes, especially since “How do you know who this is?” and “How did you get the code?” might be separate questions. Though since many people will only ever scan in-person, with people they have long known IRL, a default message would be good.