Skip to content

implement disallow_attester_search_for_domains OrgRule #299

@tomholub

Description

@tomholub

part of #275

When this is present, it will contain a list of domains (defaults to empty array when not set/nil), or possibly a star * which means disable Attester search completely (and only rely on WKD).

You'll want to re-implement this method in ClientConfiguration or a similar place:

https://github.com/FlowCrypt/flowcrypt-browser/blob/a6d0dc021e20c43e41f906aa8783c77f304e3521/extension/js/common/org-rules.ts#L170-L184

Then you'll use that method whenever fetching public keys from Attester. If this returns false, do not send any request to Attester and act as if Attester returned zero results. Best would be to edit the Attester methods, for example like done here: https://github.com/FlowCrypt/flowcrypt-browser/blob/3efa45c841808d9e9185ff9b38d1b78be10117f4/extension/js/common/api/key-server/attester.ts#L22-L28

Please be careful that - while the OrgRules belong to the sender - inside the above method goes email address of the recipient.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions