Skip to content
This repository has been archived by the owner on Apr 8, 2024. It is now read-only.

Securely transfer the introducer furl to new users #465

Closed
exarkun opened this issue Feb 2, 2017 · 3 comments
Closed

Securely transfer the introducer furl to new users #465

exarkun opened this issue Feb 2, 2017 · 3 comments
Milestone

Comments

@exarkun
Copy link
Contributor

exarkun commented Feb 2, 2017

Currently the service emails a furl to the user once it becomes available (after a long delay). The introducer furl is somewhat sensitive material (attackers can use it to get storage they don't have to pay for, for example).

We should send this information to the user in a way that makes it harder to steal.

Putting it into a magic wormhole is probably a good solution.

@Liz315
Copy link
Member

Liz315 commented Feb 9, 2017

We should offer this for customers using CLI and GUI.

@Liz315 Liz315 added this to the Backlog milestone Feb 9, 2017
@exarkun
Copy link
Contributor Author

exarkun commented Feb 9, 2017

https://github.com/LeastAuthority/leastauthority.com/milestone/11 is going to require this so as that approaches completion we'll probably want to prioritize this up. We could also do it earlier since CLI users will also be able to use this without the GUI, if they want.

@exarkun
Copy link
Contributor Author

exarkun commented Sep 13, 2017

#624 changed signup to be wormhole-based for all signups.

@exarkun exarkun closed this as completed Sep 13, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants