Device dehydration: users should be able to see their own dehydrated device(s)

[richvdh]

Currently, there is no way [1] for a user to see if there is an active dehydrated device on their account. Such devices are hidden from the "Sessions" tab.

Hiding this information is problematic from the security point of view: users should be able to find out whether clients are making dehydrated devices behind their backs.

[1]: Other than in the "Security & Privacy" settings tab, which will be removed by #29088.

[richvdh]

There was previously a suggestion that it would be adequate to say "You have an offline device enabled" somewhere, provided having multiple dehydrated devices was treated as an error case (so that none of the dehydrated devices receive keys). It looks like the first part happened previously (but is being removed by #29088), though the second did not.

[dkasak]

There was previously a suggestion that it would be adequate to say "You have an offline device enabled" somewhere

Relatively prominently saying this, mind you, not in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of the Leopard' or anything like that.

The concession was that dehydrated (offline) devices needn't be shown as normal devices, to avoid confusing users who would be wondering why the list of devices now includes something which isn't a computer or electronic gadget of theirs. But it should still be readily apparent that the feature is enabled to users that actively go seeking out their list of devices.