forwardemail / forwardemail/superagent
Support certificate pinning
- Dominant language
- JavaScript
- Stars
- 16.6k
- Forks
- 1.3k
- PR merge metrics
- No merged PRs in 30d
Description
It would be a very great security improvement for some node projects of mine, if I could get [certificate pinning](https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning) running with superagent.
I could relativly easy implement this, If I colud get access to the raw socket via `socket.on('secureConnect')`, but it I have not found a way to do this.
Is there a way to access the socket? If not could you please implement access to the socket?
Contributor guide
Research direction
Start by tracing superagent's Node.js request path to the point where `socket.on('secureConnect')` would be used, and determine whether the underlying socket is currently exposed. The work is done when Node consumers can access the socket needed for certificate pinning, with the behavior verified without affecting browser usage.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- api, backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100