keybase / keybase/keybase-issues
Bio page allows name change. Can create discrepancy with key metadata
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
I can change my full name in my bio, but AFAIK this doesn't modify my key in any way. Should it? If I sign up with a real name, then decide to change my bio to use a nom de plume, I could inadvertently reveal my true identity via key signature's name field.
Alternatively, if keybase isn't able to modify the name in the signature, should it be disabled in the web UI?
EDIT: Correction, "modify the name in the signature" should have been "modify the name in the key"
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing how the bio page handles full-name changes and how the key's name metadata is exposed in signatures. Determine whether the two values must stay consistent or whether the web UI should disable the change; done means the selected behavior prevents inadvertent identity disclosure.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100