keybase / keybase/keybase-issues

Multiple Keybase accounts proves with the same Twitter account?

Open
#842 4 comments 1 reaction 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I'm not really sure if this is an issue or designed so by intent, but right now I actually have two Keybase.io accounts, which share identity proofs of one Twitter account:
[boegh](https://keybase.io/boegh) (person a) and [heb](https://keybase.io/heb) (person b) both have proofed their identity with [twitter.com/boegh](https://twitter.com/boegh).

This can be either by intent; i.e. multiple users linking to an organizations Twitter-account (sort of the opposite of #330). It can also be that nobody thought of it, in which case it may be an issue (I haven't found this discussed among the issues), in case person b hijack person a's Twitter acount.

It makes me wonder though, if the first person (person a) to register a proof with a Twitter account, should receive an e-mail or something if another person (person b) tries to register a proof, with a Twitter account, that is already registered in Keybase?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the issue's existing identity-proof registration flow and the related discussion in #330. The issue does not name files or tests; first determine whether duplicate Twitter proofs are intended, then define the expected behavior for an already-registered account and how completion would be verified.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.