keybase / keybase/keybase-issues
sign public key without curl
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
On tor, the use of curl to upload a public key signature via https will leak the user's ip adress.
It's not simple to upload the signature since the site requires a POST request.
Proposal:
Please consider adding add a simple form that will allow the user to copy paste the key signature to an textarea making the required post request.
Thanks.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the website flow that currently requires a POST request to upload a public key signature. Review how the existing signature submission works and determine where a pasteable form would fit. Done means users can submit the copied signature through the site without using curl, while avoiding the stated IP exposure concern.
Written by the indexing model from the issue text.
Assessment
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100