keybase / keybase/keybase-issues
Keybase's Amazon S3 resources use weak SHA-1 certs
Open
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
It appears that Keybase only uses S3 for profile photos and other images, but this could still be a security issue.
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue identifies Keybase's Amazon S3 resources and weak SHA-1 certificates, but names no files, tests, or entry points. First determine where the S3 resources and certificate configuration are managed; the work is complete when those resources no longer use weak SHA-1 certificates and the relevant behavior is verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100