keybase / keybase/keybase-issues

Website TXT proof verification fails with TLSv1.3

Open
#3,443 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I use nginx, and if I set `ssl_protocols` to only `TLSv1.3`, Keybase fails to verify my proof. If I set to also allow `TLSv1.2` though, it works fine.

I'm verifying my site with the txt file option; [my proof is here](https://realmofespionage.xyz/keybase.txt).

Contributor guide

No contributing guide indexed for this repository

Research direction

No repository files or tests are named. Reproduce the TXT proof check against the linked site with nginx restricted to TLSv1.3, compare it with TLSv1.2 enabled, and trace the verification entry point; done means TLSv1.3-only sites verify successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
nginx
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.