keybase / keybase/keybase-issues
`keybase sign` and plaintext password
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
When I run `keybase sign` with no options, I get asked for my private key password. When I start typing it, the passphrase shows up in plain text.
When I run `echo "asdf" | keybase sign`, everything works as expected.
So, maybe there should be an error if no piped stdin is detected on `keybase sign`?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the `keybase sign` command entry point and reproduce both cases: interactive use with no options and piped input via `echo "asdf" | keybase sign`. The work is done when interactive signing no longer exposes the private-key passphrase and piped signing continues to work, with tests covering both behaviors.
Written by the indexing model from the issue text.
Assessment
- Domain
- cli
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100