rnp icon indicating copy to clipboard operation
rnp copied to clipboard

Add option --strip-confidential to the --list-packets command.

Open ni4 opened this issue 3 years ago • 2 comments

Description

This option may be useful when debugging certain key/signature issues, when userid/keyid/other confidential information should not be revealed.

ni4 avatar Feb 03 '22 16:02 ni4

What exactly this option should do? Drop everything confidential (like secret key material) from the output or hide/replace by placeholder characters? Almost everything can be considered confidential.

antonsviridenko avatar Jun 04 '23 17:06 antonsviridenko

@antonsviridenko aside of secret key material it should also strip userids, keyids/fingerprintg (maybe leaving 1-2 chars to be able to distinguish between keys/subkeys). I.e. instead of userid [email protected] print p****@m***** (number of * should be fixed). Instead of keyid/fingerprint print 0x*********1F (number of * should be the same as in the original keyid/fingerprint.). Maybe some other things should be replaced as well.

ni4 avatar Jun 05 '23 10:06 ni4