in-web-browsers icon indicating copy to clipboard operation
in-web-browsers copied to clipboard

Published 20 hours ago • verified publisher icon ipfs

Clarify security status displayed in Brave address bar

Open RubenKelevra opened this issue 3 years ago • 0 comments

Currently, all data received by the brave integration (https://github.com/ipfs/in-web-browsers/issues/64) is marked as "not secure". While this is currently true for IPNS, it's not true for IPFS-CIDs.

I created a ticket to have a look at the integration of DNSSec to make sure we have domain-to-content validation and don't rely on unencrypted unsigned DNS requests which can be altered by MITM or DNS-Spoofing.

URLs with the IPFS-scheme are also marked as insecure, which is not true - so there's also a ticket (https://github.com/brave/brave-browser/issues/13727) for that.

Originally I created a ticket here, but the content got moved to https://github.com/brave/brave-browser/issues/13706.

RubenKelevra avatar Jan 24 '21 13:01 RubenKelevra