Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify security status displayed in Brave address bar #175

Open
RubenKelevra opened this issue Jan 24, 2021 · 0 comments
Open

Clarify security status displayed in Brave address bar #175

RubenKelevra opened this issue Jan 24, 2021 · 0 comments
Labels
status/in-progress In progress topic/brave Issues specific to IPFS in Brave browser vendors

Comments

@RubenKelevra
Copy link

Currently, all data received by the brave integration (#64) is marked as "not secure". While this is currently true for IPNS, it's not true for IPFS-CIDs.

I created a ticket to have a look at the integration of DNSSec to make sure we have domain-to-content validation and don't rely on unencrypted unsigned DNS requests which can be altered by MITM or DNS-Spoofing.

URLs with the IPFS-scheme are also marked as insecure, which is not true - so there's also a ticket (brave/brave-browser#13727) for that.

Originally I created a ticket here, but the content got moved to brave/brave-browser#13706.

@RubenKelevra RubenKelevra added the need/triage Needs initial labeling and prioritization label Jan 24, 2021
@ipfs ipfs deleted a comment from welcome bot Jan 25, 2021
@lidel lidel added topic/brave Issues specific to IPFS in Brave browser vendors status/in-progress In progress and removed need/triage Needs initial labeling and prioritization labels Jan 25, 2021
@lidel lidel changed the title Secure context upgrades (Brave browser) Clarify security status displayed in Brave address bar Jan 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
status/in-progress In progress topic/brave Issues specific to IPFS in Brave browser vendors
Projects
None yet
Development

No branches or pull requests

2 participants