keybase / keybase/keybase-issues

If a user uploads a public key block with multiple master keys, instead of failing, ask them to choose

Open
#222 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

Related to #202, when a user does `gpg --armor --export `, they'll get _all_ the public keys which correspond to that email address. Some users have more than one key; some users have one current key, and some revoked/expired ones. This results in a public key block containing multiple keys.

Right now, Keybase throws an error when this happens (#82, #170). This seems like non-ideal behavior. Instead, parse the keys first. If any are revoked or expired, discard those. If that leaves you with one valid key, use that. Otherwise, display a key-summary to the user, and ask them which one they want to attach to their Keybase profile.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the issue with `gpg --armor --export ` and read related issues #202, #82, and #170 for existing behavior and constraints. No implementation files or tests are named; done means revoked or expired keys are discarded, one remaining valid key is selected automatically, and multiple valid keys produce a summary and choice prompt.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.