mozilla-services / mozilla-services/autograph
monitor and warn for unused keys and disable them after N days
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 176
- Forks
- 34
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 3
Description
refs: signing meetings notes for 2018-09-10 and https://bugzilla.mozilla.org/show_bug.cgi?id=1471730
First for autograph-edge then for autograph though this might need to wait on HSM migration in case ops are signing things locally.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue identifies autograph-edge and autograph, and links signing meeting notes plus Bugzilla 1471730, but names no files or tests. Start by reading those references and clarify the unused-key threshold and HSM migration dependency. Done means both services monitor unused keys, warn, and disable them after the agreed number of days.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100