Do not display unverified uids as part of a key for hkp index and vindex output
This is not for security or privacy reasons, but to provide an accurate answer to a search request.dont-leak-uids
parent
eaefa45ddb
commit
5c1ddb4e21
|
@ -136,7 +136,9 @@ class HKP {
|
|||
ctx.body = `info:${VERSION}:${COUNT}\npub:${fp}:${algo}:${key.keySize}:${created}::\n`;
|
||||
|
||||
for (const uid of key.userIds) {
|
||||
ctx.body += `uid:${encodeURIComponent(`${uid.name} <${uid.email}>`)}:::\n`;
|
||||
if(uid.verified) {
|
||||
ctx.body += `uid:${encodeURIComponent(`${uid.name} <${uid.email}>`)}:::\n`;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue