fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CERT LIST #3

New issue
Closed
opened 2026-07-19 17:02:22 +00:00 by reverse · 1 comment
reverse commented 2026-07-19 17:02:22 +00:00
Owner
Copy link

Remove password to view CERTFP list when already logged in

Reported via IRC by PeGaSuS.

Remove password to view CERTFP list when already logged in _Reported via IRC by PeGaSuS._
reverse commented 2026-07-19 17:17:55 +00:00
Author
Owner
Copy link

Fixed in 6149a15 and deployed. CERT no longer demands a password when you are already identified: CERT LIST, CERT ADD <fp> and CERT DEL <fp> now act on your session account directly. The password stays required only for an unidentified caller (CERT LIST <password>), which preserves the throttled-oracle protection against /nick victim + guessing. Help text updated; regression test added.

Fixed in 6149a15 and deployed. CERT no longer demands a password when you are already identified: `CERT LIST`, `CERT ADD <fp>` and `CERT DEL <fp>` now act on your session account directly. The password stays required only for an unidentified caller (`CERT LIST <password>`), which preserves the throttled-oracle protection against `/nick victim` + guessing. Help text updated; regression test added.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: fedserv/echo#3
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?