cryptomator / hub

Cryptomator Hub helps you manage vaults in large teams
GNU Affero General Public License v3.0
41 stars 9 forks source link

Sign User's Keys #190

Closed overheadhunter closed 2 months ago

overheadhunter commented 1 year ago

Please agree to the following

Summary

After verifying another user's public key, I want to sign it

Motivation

When encrypting something using somebody's public key, one needs to be sure that this public key is authentic. In order to increase trust, we want a verification mechanism and the ability to sign public keys once verification completed. The signature can then be used at a later point to prevent accidentally granting access to some untrusted user.

Considered Alternatives

No response

Anything else?

No response

### Tasks
- [x] Decide, how to verify a user's public key (prompt for some digits of its hash?)
SailReal commented 2 months ago

@overheadhunter this is implemented in https://github.com/cryptomator/hub/pull/281, so we can close this issue, right?