keybase / keybase/keybase-issues
signed by unknown author but key fingerprint is known to system
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
Web verify shows result "signed by unknown author (key fingerprint: foo)"
where foo is a 64-bit ID.
Searching for key foo under web encrypt does provide a match (it seems to display the long fingerprint since the autocomplete match shows some prefix text from fingerprint and properly resolves to the proper user
When I do a command line: "keybase pgp verify < doc.sig" where doc.sig is the content I used earlier, I get a successful message:
"Signature verified. Signed by [proper user name] 1 hour ago"
So I wish the web verify can resolve the user id for fingerprint "foo" and replace that with the keybase userid string.
In this test, I signed a doc myself.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the web verify flow described in the issue and compare its fingerprint lookup with the successful command-line `keybase pgp verify` result. Done means web verification resolves a known fingerprint to the matching Keybase user instead of showing only an unknown-author message.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100