keybase / keybase/client

TLS 1.0 is used for mail transport

Open
#8,327 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
9.2k
Forks
1.3k
Avg merge
12h 58m
Merged PRs (30d)
56

Description

This is the header of a mail coming from notify@keybase.io:

Received: from a8-237.smtp-out.amazonses.com ([54.240.8.237])
by xxx.xxx.xx with esmtps (TLS1.0:ECDHE_RSA_AES_128_CBC_SHA1:128)

It would be nice if you could switch to TLS 1.2 for smtp transport encryption as TLS 1.0 is slowly being replaced by TLS 1.2 everywhere due to possible problems with TLS 1.0.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The report names no source file, test, or entry point; it only includes a received-mail header showing TLS 1.0 for SMTP transport. Start by locating the SMTP transport configuration and its TLS-version handling; done means the transport uses TLS 1.2 instead of TLS 1.0 and the relevant verification passes.

Written by the indexing model from the issue text.

Assessment

Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.