keybase / keybase/keybase-issues

`keybase sign` and plaintext password

Open
#226 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

When I run `keybase sign` with no options, I get asked for my private key password. When I start typing it, the passphrase shows up in plain text.

When I run `echo "asdf" | keybase sign`, everything works as expected.

So, maybe there should be an error if no piped stdin is detected on `keybase sign`?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the `keybase sign` command entry point and reproduce both cases: interactive use with no options and piped input via `echo "asdf" | keybase sign`. The work is done when interactive signing no longer exposes the private-key passphrase and piped signing continues to work, with tests covering both behaviors.

Written by the indexing model from the issue text.

Assessment

Domain
cli
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.