-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: use --password-store=basic
when launching Signal
#321
Conversation
See snapcrafters#300 An upstream Chrome issue blocks the correct inovation of libsecret from within snap/flatpak environments, which means that Signal loses access to the encryption key used to encrypt the local database, and needs to be re-linked (losing all message history) every time it's launched.
--password-store=basic
when launching Signal
Edit: disproved my own theory! Updated the PR description with more info. |
63ceb90
to
d42fdb6
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I do think this is the way to solve this. My only concern is what will the experience be for users that already have their auth stored in the keyring. I guess they will just get prompted to login again, which isn't bad.
I don't think so -- for users that already use the keyring, things will carry on as normal. |
Can anyone say in which version the fix should have manifested? Or is this still pending? Also, would I see an effect on Windows with that fix (I don't mean the wrapper, which obviously won't ... I mean adding the argument)? |
Fixes #300 🥳
Start Signal with
--password-store=basic
and prevent it from trying to usegnome-libsecret
, which as far as I can tell is broken in the Chrome implementation, inherited by Electron, and thus meaning that Signal keeps losing access to the encryption key for its database!This solution is less secure, but without it, Signal literally doesn't work on some platforms. The introduction of the
safeStorage
API in Signal is relatively recent, and fraught with issues on multiple platforms:It appears to be broken in the Snap, Flatpak, official Deb and even on Windows - though this doesn't seem to be acknowledged by Signal.
My proposition is we merge this fix, and keep and eye on changes upstream, potentially removing this workaround once we have confidence it'll work!
Further info: