keybase / keybase/client

My keys expired and Keybase doesn't warn anyone of my followers

Open
#8,492 18 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
9.2k
Forks
1.3k
Avg merge
12h 58m
Merged PRs (30d)
56

Description

Long story short.

My key expired some time ago. I can still chat through Keybase Chat and none is even warned that my key expired. What's more stunning is that my messages are shown as Encrypted & Signed & OK!

I maybe little outrage but seriously? What is the point of expiry date of my key if Keybase doesn't even warn my peers/colleagues that they shouldn't trust my key as it is expired!

Second thought is that, how can I use old and new key with Keybase so I won't lost my chat history? Is this even possible? Can I send both proofs for old and new key?

Thanks
Kamil

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by examining the Keybase Chat behavior described for expired keys and how old and new keys are handled together. Reproduce whether peers receive any warning and whether messages remain marked as encrypted and signed; done means the expiry state is communicated correctly without losing chat history.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cryptography, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.