Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gopass sync should give more metadata for importing keys #425

Closed
falschparker82 opened this issue Oct 26, 2017 · 1 comment
Closed

Gopass sync should give more metadata for importing keys #425

falschparker82 opened this issue Oct 26, 2017 · 1 comment
Labels
security ux User experience / User Interface related

Comments

@falschparker82
Copy link
Contributor

screen shot 2017-10-26 at 11 07 18

Steps to reproduce: gopass sync with new public key added to any repository

Issue: gopass asks me out of the blue if I want to import a new key, but I don't even know who that is (email, fingerprint, etc.)

Answering yes is a gamble: I don't know who I'm currently adding and I'm trusting my peers
Answering no is probably also not what I want: In 99% of all cases, I do want to add that person too (if I finally know who ;-) ), also otherwise encryption will fail.

Fix ideas: Either more metadata right away (at least email!) or new option [d] for details...

@falschparker82 falschparker82 added security ux User experience / User Interface related labels Oct 26, 2017
@dominikschulz
Copy link
Member

Yes, indeed. I noticed this as well but failed to raise an issue so far. Thanks for reporting.

Should be possible with https://godoc.org/golang.org/x/crypto/openpgp#ReadArmoredKeyRing

dominikschulz added a commit to dominikschulz/gopass that referenced this issue Oct 26, 2017
dominikschulz added a commit to dominikschulz/gopass that referenced this issue Oct 26, 2017
kpitt pushed a commit to kpitt/gopass that referenced this issue Jul 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security ux User experience / User Interface related
Projects
None yet
Development

No branches or pull requests

2 participants