> E.g., I have one device 'foo' which you already trust. I add a new device 'bar'. Why on earth would you want to verify its key manually when I could just send you the new key from 'foo' which you already trust?
This particular issue is being worked on right now in Riot, and should be fixed early in the new year.
This particular issue is being worked on right now in Riot, and should be fixed early in the new year.