No means to prevent anyone I don't follow from adding me to a team
Open
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- Avg merge
- 12h 58m
- Merged PRs (30d)
- 56
Description
… which leaves Keybase open to being a vector for abuse.
Keybase GUI Version: 4.7.2-20191026044208+6fc2e969b4
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names no files, tests, or entry points and only describes a missing way to prevent unsolicited team additions. First clarify the intended follow relationship, user setting, and behavior for existing invitations; then locate the team-membership access-control entry points and define tests for the resulting policy.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100