securedrop-workstation
securedrop-workstation copied to clipboard
Split-GPG: consider making GPG keys access never expire
The following prompt appears when sd-app is first start:
If the user clicks No this could lead for an unusable workstation (at least until sd-app restart) and I think it doesn't add anything from the security perspective since the user is always expected to say Yes.
This was set to 8 hours in 2018 and has stayed like that since then, my suggestion would be to reconsider if this choice still makes sense from the UX and security perspectives.
I'll be making a PR for this so this never pops up again for users 🤩
This will have implications for #1265, but we'll probably merge this one first and think about the other afterwards.