Extension talk:GPGMail
Latest comment: 4 years ago by Tgr (WMF) in topic Uploaded a key where?
Uploaded a key where?[edit]
where does the extension look for uploaded keys? --أحمد (talk) 21:36, 21 February 2016 (UTC)
- In the user_properties table (although this was the wrong decision and will eventually be changed). Normally, users would upload keys via their preferences page. --Tgr (WMF) (talk) 22:38, 21 February 2016 (UTC)
- An option would indeed be to upload an ASCII armoured key to our preferences and store it in the database. In this case, maybe requiring entering a combination of password and 2FA token when adding, changing or removing the key would be good just in case. Another option would be to inquire the WMF and ask them if they'll be willing to maintain a wikimedia.org keyserver for us to use and query data from there. —MarcoAurelio (talk) 17:44, 5 January 2020 (UTC)
- User preferences are added to the HTML of every logged-in pageview, so putting large security-sensitive data there is both a perfromance and a security problem; the extension would have to use its own DB tables instead. (Involving keyservers seems like a needless comlication.) This was a side project and I won't have time to work on it anytime soon, but if someone wants to update it to use its tables, it should be pretty easy (it would probably mean that a special page would be needed instead of relying on preferences for input, but that's also relatively easy). --Tgr (WMF) (talk) 01:26, 6 January 2020 (UTC)
- An option would indeed be to upload an ASCII armoured key to our preferences and store it in the database. In this case, maybe requiring entering a combination of password and 2FA token when adding, changing or removing the key would be good just in case. Another option would be to inquire the WMF and ask them if they'll be willing to maintain a wikimedia.org keyserver for us to use and query data from there. —MarcoAurelio (talk) 17:44, 5 January 2020 (UTC)