Profile shows Stellar account even though I revoked the signature
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- PR merge metrics
- PR metrics pending
Description
See this demonstration profile for an example: https://keybase.io/crashtestdummy
You can see a Stellar payment address. If you click it, you'll get a Stellar account ID that's supposedly mine, and a link to the proof that the Keybase client software signed (which came as a bit of a surprise to me, but that is a separate issue):
https://keybase.io/crashtestdummy/sigchain#59fb0ff491a633172cf07aac38cb37c3aedf829d221d9f23dc772a14d7a8aede22
In response to this unwanted signing, I **revoked** this signature:
https://keybase.io/crashtestdummy/sigchain#9d05b06427cb92ff72e74dee8cc96d84271c2bfefeb7be47768e6c9805c6df230f
Despite my revocation, the profile page still shows a Stellar payment address in my name, **linking to the Stellar account ID and using the signature that I revoked, but without showing it as revoked**.
After revocation, I would have expected the Stellar payment address to be removed from my profile page, or at least clearly shown as revoked.
Please update the client and website so that it respects the revocation.
**Edit**: Changed to a demonstration account.
Contributor guide
No contributing guide indexed for this repository
Research direction
Reproduce the behavior on the demonstration profile at https://keybase.io/crashtestdummy and inspect the referenced sigchain entries, especially the revoked signature. Trace how revocations are handled by the client and website; done means the Stellar payment address is removed or clearly marked revoked after revocation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- backend, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100