keybase / keybase/keybase-issues
Suggestion: Implement HTTP Public Key Pinning for Keybase.io website
Open
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
I suggest implementing [RFC 7469](https://tools.ietf.org/html/rfc7469) compliant HTTP Public Key Pinning for https://keybase.io and https://www.keybase.io.
It could protect Keybase users from some sophisticated MITM attacks.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading RFC 7469 and reviewing the issue's target URLs, https://keybase.io and https://www.keybase.io. Determine where the website's HTTP security configuration is maintained and which deployment or verification steps would establish that compliant pinning is complete.
Written by the indexing model from the issue text.
Assessment
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100