Jump to content

Extension talk:GPGMail

Add topic
From mediawiki.org
Latest comment: 4 years ago by Tgr (WMF) in topic Uploaded a key where?

Uploaded a key where?

[edit]

where does the extension look for uploaded keys? --أحمد (talk) 21:36, 21 February 2016 (UTC)Reply

In the user_properties table (although this was the wrong decision and will eventually be changed). Normally, users would upload keys via their preferences page. --Tgr (WMF) (talk) 22:38, 21 February 2016 (UTC)Reply
An option would indeed be to upload an ASCII armoured key to our preferences and store it in the database. In this case, maybe requiring entering a combination of password and 2FA token when adding, changing or removing the key would be good just in case. Another option would be to inquire the WMF and ask them if they'll be willing to maintain a wikimedia.org keyserver for us to use and query data from there. —MarcoAurelio (talk) 17:44, 5 January 2020 (UTC)Reply
User preferences are added to the HTML of every logged-in pageview, so putting large security-sensitive data there is both a perfromance and a security problem; the extension would have to use its own DB tables instead. (Involving keyservers seems like a needless comlication.) This was a side project and I won't have time to work on it anytime soon, but if someone wants to update it to use its tables, it should be pretty easy (it would probably mean that a special page would be needed instead of relying on preferences for input, but that's also relatively easy). --Tgr (WMF) (talk) 01:26, 6 January 2020 (UTC)Reply