[Story] EX: Minimum user verification support & guidance

[mxandreas]

Description

Currently, EX does not support verification of users, does not show the user verification status (e.g. has the user been verified), or does not prompt if the verified identity has changed (for safety, sending messages is blocked).

A couple of sub/related topics here are being tracked by Crypto team already:

• [Story] Show in the UX if a user is verified #2532
• Invisible crypto: display a warning when a verified user changes identity #2492

As the actual user verification won't be available soon, we are seeking to find a minimum that is required to not heavily mislead users (e.g. search for the function that does not exist, or be puzzled why user is not showing as verified although it was just verified with EW).

Acceptance criteria

Ensure that using user verification is safe and users are not mislead in the current non-ideal situation.

Leads

• Tech: @stefanceriu
• Design: @americanrefugee

Size estimate

None

Dependencies

• None

Out of scope

No response

Open questions

Questions

Preview Give feedback

No tasks being tracked yet.

Subtasks

Android

Preview Give feedback

No tasks being tracked yet.

iOS

Preview Give feedback

No tasks being tracked yet.

Rust

Preview Give feedback

No tasks being tracked yet.

Other

Preview Give feedback

No tasks being tracked yet.

Sign-off

Android

• Design sign-off on completion
• QA sign-off on completion
• Product sign-off on completion

iOS

• Design sign-off on completion
• QA sign-off on completion
• Product sign-off on completion

[mxandreas]

We had a sync. with @stefanceriu @americanrefugee @BillCarsonFr and @andybalaam . I will summarize the agreement here and then create proper GH epics/stories for this. The points are listed in the order of the priority - so we know where to start from and what we can potentially postpone if some items take more time (we can't spend much right now, hence finding the minimum).

• Show a disabled button for user verification with a hint that verification is available on web.

• Hide the button above when the user has been verified and their verified identity has not change; also in that case show a verified badge on the contact's profile.

• When the person's verified-identity has changed, show the banner at the top of the composer.

• When the person's verified-identity has changed, indicate this on their profile & allow to withdraw verification.

[mxandreas]

Have created a proper epic with stories https://github.com/element-hq/element-internal/issues/640 and thus will close this issue.