Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use the api to fetch the admin public key for users to send the decryption key securely #1244

Closed
Tbaut opened this issue Jul 7, 2021 · 0 comments · Fixed by #1485
Closed
Assignees

Comments

@Tbaut
Copy link
Collaborator

Tbaut commented Jul 7, 2021

To report a file that may not comply with our privacy policies, users can send to an admin the path to the file that is concerned, along with the decryption key. For the first iteration of this feature, users need to send this info per email, and because this means of transport is insecure, the file decryption key should be first encrypted with an admin public key.

This admin public key is currently hardcoded in the UI, and it should rather be fetched from the api so that it can be rotated without any UI change.

@Tbaut Tbaut added Epic: Sharing with link Added to issues due for Sharing v1, allowing to share with any email from Google/Github. and removed Epic: Sharing v1 (current users) labels Aug 3, 2021
@Tbaut Tbaut self-assigned this Sep 1, 2021
@Tbaut Tbaut removed the Epic: Sharing with link Added to issues due for Sharing v1, allowing to share with any email from Google/Github. label Sep 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant