keybase / keybase/keybase-issues

signed by unknown author but key fingerprint is known to system

Open
#2,092 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

Web verify shows result "signed by unknown author (key fingerprint: foo)"
where foo is a 64-bit ID.
Searching for key foo under web encrypt does provide a match (it seems to display the long fingerprint since the autocomplete match shows some prefix text from fingerprint and properly resolves to the proper user
When I do a command line: "keybase pgp verify < doc.sig" where doc.sig is the content I used earlier, I get a successful message:
"Signature verified. Signed by [proper user name] 1 hour ago"
So I wish the web verify can resolve the user id for fingerprint "foo" and replace that with the keybase userid string.
In this test, I signed a doc myself.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the web verify flow described in the issue and compare its fingerprint lookup with the successful command-line `keybase pgp verify` result. Done means web verification resolves a known fingerprint to the matching Keybase user instead of showing only an unknown-author message.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.