keybase / keybase/keybase-issues

Bio page allows name change. Can create discrepancy with key metadata

Open
#521 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I can change my full name in my bio, but AFAIK this doesn't modify my key in any way. Should it? If I sign up with a real name, then decide to change my bio to use a nom de plume, I could inadvertently reveal my true identity via key signature's name field.

Alternatively, if keybase isn't able to modify the name in the signature, should it be disabled in the web UI?

EDIT: Correction, "modify the name in the signature" should have been "modify the name in the key"

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing how the bio page handles full-name changes and how the key's name metadata is exposed in signatures. Determine whether the two values must stay consistent or whether the web UI should disable the change; done means the selected behavior prevents inadvertent identity disclosure.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, security, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.