-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Provide documentation and tooling for generating key values #217
Comments
I think the Fernet crypto key is the only key that we need to document and provide tooling for? (or at least it's the only one that is documented for Python autopush) |
I think you're right. I was looking around to see if there were any others.
If folks wanted, they could use the same tool to generate the other values as well, but we should note they should be a different values than the fernet key to keep folks from making silly mistakes. |
Is UAID key hashing still in use? AFAIK, it isn't and it hasn't been re-implemented in Rust. We can add it back in though if that's required. |
It's complicated? The UAID hash was originally suggested to us by an OpSec member, after roll out. We don't currently use it in our production because it would invalidate older records, but if anyone were to set up their own Push server, it's not a terrible idea because it provides some security against correlation if the data were to ever leak out. |
In the python version, we provided instructions on how to generate the fernet crypto_key and other values. It might be worth bringing over the
autokey.py
into tools and providing some additional docs for how to get it working.The text was updated successfully, but these errors were encountered: