Verified group with far away members

hi,
how can I invite someone far away from my computer. He can’t scan the QR-code on my screen!
Same problem: how can I verify someone far away.

By the way: I started a verified group with 2 members without scanning the QR-code. And I can chat!
Thanks and greetings
Gert

one goal of the verified groups are the protection against active network attacs.

to reach this goal, each cryptographic setup of each member has to be verified with a second factor by at least one member, currently, this hast to be a qr-code-scan. maybe there will be other options in the future.

however, as said, this verification is not needed by every member - so in your case, maybe someone else can add the new member?

if this is not possible, you cannot add the member to the group as it is not guaranteed that the cryptographic setup is not compromised.

nb: as a workaround, i personally also managed to do a qr-code-scan during a video-conference, not sure, however, if that mitigates the seconds factor and may introduce new attac vectors.

if the members are already verified, this is on-purpose.

in general, please note, that, although already well-usable, verified groups are still in “experimental” state.

On the newer desktop versions you have also a text-code that you can send over a different transport/factor this code can be used in the desktop client to initiate the verification process.
Basically this code is the text content of the qr code.

1 Like

Does Delta Chat show in the UI somewhere if the person you’re talking to was physically scanned with a QR code vs just added through a link?

I recall Threema had varying levels of verification with physical scanning being the most secure or something. The UI doesn’t need to scare people that way, but some info in the UI about how you added them might be interesting

1 Like

It would be nice to have narrative histories of verification, but they do not exist:

For practical advice on connecting to a remote friend:

Certainly adding a contact remotely is much more complex than meeting in person or having a common friend, and has security risks.

Threema showed this with 3 levels of check marks. I really liked the UX of that.

this article explains it What do the three colored dots next to a contact mean? – Threema

how about:

  • green (scanned QR code)
  • yellow (added from link)
  • red (in same group chat without getting link or scanning)

That is an interesting idea for a feature request! Since this is a Mutual-help thread, though, it is not likely to be seen here; you might want to start a new thread instead of tagging it on to this 6-year-old one. :slight_smile:

1 Like