search

keybase / keybase-issues

A single repo for managing publicly recognized issues with the keybase client, installer, and website.
902 stars 37 forks source link

User page does not flag missing github proof gist #404

Open ferebee opened 10 years ago

ferebee commented 10 years ago

The user maclemon verified his github identity with Keybase, but subsequently deleted the gist. This is displayed correctly in the commandline client:

# keybase id maclemon
info: Creating temporary keyring dir: /Users/ferebee/.keybase/tmp_keyrings
✔ public key fingerprint: BC81 E1ED A963 EBF4 6D6A E7EA 9869 59F0 4139 98E2
✔ "maclemon" on twitter: https://twitter.com/maclemon/status/449255531283091456
✖ "maclemon" on github: https://gist.github.com/9814935 (failed with code 240)
✔ admin of maclemon.at via HTTPS: https://maclemon.at/.well-known/keybase.txt

However, the web page https://keybase.io/maclemon does not reflect this. It should.

keybase-maclemon

maxtaco commented 10 years ago

Looks like @maclemon posted, we check it at 14:39EST, and then he deleted it. There's a 6 hour timeout before rechecking. It should remove the proof at that time. Let's keep on an eye on it, and if it's still there after 20:39 EST, look further into it.

MattSurabian commented 10 years ago

Obviously constant proof checking is reasonably difficult at scale, are there plans to try and lower this interval as adoption increases or is 6 hours the minimum we're likely to ever see?

maxtaco commented 10 years ago

There might be a decent crowd-sourced solution -- for clients to trigger the server to revisit a failed proof.

MattSurabian commented 10 years ago

Yeah that's what I was kinda thinking about, at least a way to thin the scheduled work. Pain point is having to actually verify the content, 404 isn't sufficient :-(

ferebee commented 10 years ago

That all makes perfect sense, but I found the discrepancy unnerving at first sight. (I’m just a regular guy.) What if there were an indicator “last checked 5 hours ago” and a button “validate now”?

maxtaco commented 10 years ago

Great idea.

maxtaco commented 10 years ago

Confirmed that the site eventually updated.

MacLemon commented 10 years ago

@maxtaco That is correct, I removed the gist after verification. Good to see a reasonable handling of this case. Instructions in the terminal weren't really clear on what to post and what exactly is needed in the gist. Way too much text to fit in a small (80*25) standard terminal window. (I guess I'll open a separate issue for that.)

Maybe more followed persons should be evaluated more often? Just an idea, not sure if it's a smart one. :-)

dgw commented 10 years ago

The "Validate now" button is a great idea, as is having clients that fail a verification trigger a recheck on the server side.