Sign replies with submission key, verify signature server-side proposed
MITIGQW41 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:914
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Plaintext submissions exfiltrated THREATQW40 | partially mitigated | 6 medium | 6 medium |
| Journalist Interface credentials exfiltrated (passphrase, single code, username), and API token THREATQW38 | partially mitigated | 4 medium | 4 medium |
| Attacker tampers with replies in sd-proxy THREATQW42 | accepted | 4 medium | 4 medium |