hypothesis / hypothesis/checkmate

Allow certain users to create "blessed" Via links that bypass the allow-list

Open
#121 0 comments 0 reactions 0 assignees View on GitHub
Via Allow-list Friction
Dominant language
Python
Stars
8
Forks
2
PR merge metrics
No merged PRs in 30d

Description

See also:

* [Require authentication to create Via links](https://github.com/hypothesis/checkmate/issues/74) (@lyzadanger's original issue that inspired this idea)

Allow certain users to create Via links that are somehow "blessed" so that they bypass the allow-list. For example the links might contain a signature.

"Certain users" could mean all authenticated users, or it could mean only certain somehow "blessed" user accounts, or something else.

If malign links get created in this way, perhaps we could disable them somehow (assuming we find out about it) and then possibly ban the particular user from creating any more blessed links.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.