> E.g., I have one device 'foo' which you already trust. I add a new device 'bar'. Why on earth would you want to verify its key manually when I could just send you the new key from 'foo' which you already trust?

This particular issue is being worked on right now in Riot, and should be fixed early in the new year.

That is awesome, but any thoughts on why I cannot easily view the keys of my other devices in the UI?

If I could then this would be a minor inconvenience at best, I'd just copy/paste the key from the already-trusted device.

I guess we just prioritised working on cross-signing etc rather than adding in UI for this. Sorry; it's an oversight.

Thank you for your quick and patient answers to my perhaps too demanding questions.

Cross-signing is obviously better, no question about that. However this simple UI change would be at least 95% as good, and certainly good enough to have prevented my friends from giving up on Riot.

I hope that is at least somewhat constructive. Thank you for your work.

I guess https://github.com/vector-im/riot-web/issues/2735 is the bug to upvote. Annoying it's been stuck open forever :(

> Obviously they're unlikely to ever come back.

I recognize this is a common attitude, but it makes no sense to me.

Some software you tried today isn't designed in a way you prefer, so you go back to using something else. Okay. Makes sense.

But to declare the whole project forever hopeless as if it can never be improved upon because the snapshot of your first experience with it was negative is truly irrational.

Keep in mind the only reason they tried the software is that I regularly pressured to do so for months, before they finally caved.

After all that they quickly come to realize that something simple like adding a new device is a massive pain in the ass.

It's not that they declare the whole project as forever hopeless, it's that they invested time and effort into trying it already and it turned out (for them) to be a waste.

It's just a bad taste left in the mouth. In order for them to try it again, they not only have to overcome their natural laziness/time constraints, but also the rather unpleasant memory of the last time.

The same thing happened to me, but I am thinking of having another go and just discouraging the use of E2EE. (The community I’m thinking of is currently on Slack, so there would be no marginal loss of privacy.) Have you considered that, or is your group already using another E2EE platform that isn’t a massive pain in the ass? I’ve yet to discover one myself.

They all use Signal, with varying degrees of dissatisfaction. I'm the only one who doesn't have a Signal account.

I think it's less that people assume that it can never be improved and more that they find something else that is "good enough" and they won't leave that ecosystem until it stops being good enough. Generally speaking, I've found others (and myself, at times) don't re-evaluate their options until there's a need for them to upgrade or its brought to their attention by someone else.

For me it is usually lost trust in the creators. If they market it like a finished product when it barely works I will not trust them anymore.

Now, if it is obvious that something is a work in progress then I personally wont mind giving it a new shot.