Element-R: aborting cross-signing reset leaves the account in a broken state

[richvdh]

From https://github.com/vector-im/crypto-internal/issues/154:

Resetting cross signing (bootstrap), will in most case require the user to enter their account password (to upload the new keys), and 4S passphrase to update the account data.

Currently this is not atomic, we first reset the keys locally then update 4S, then upload keys.
So if the user forgot their password/key the account will end up in a broken state, with local secrets not uploaded to server

cc @BillCarsonFr

[richvdh]

Currently this is not atomic, we first reset the keys locally then update 4S, then upload keys.

when you say "upload keys": do you mean publishing the public keys? Via /device_signing/upload?

[richvdh]

duplicate of #13338