mirror of
https://github.com/certimate-go/certimate.git
synced 2026-04-26 21:25:54 +03:00
[GH-ISSUE #92] [Feature] 建议减少api接口中返回数据 #76
Labels
No labels
announcement
backlog
bug
declined
documentation
duplicate
enhancement
good first issue
good first issue
help wanted
invalid
pull-request
question
stale
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/certimate#76
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @LeoChen98 on GitHub (Sep 24, 2024).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/92
功能描述
建议减少api接口中返回的数据,尤其是相对敏感的数据。
动机
主要是为了数据安全。
替代方案
比较重要的是:record接口中返回apikey和apisecret,还有域名列表中ssl证书的公钥、私钥和证书地址。界面上没有展示相关的信息,也没有展示的必要,建议削减。尤其是apikey和apisecret不应该明文传输,建议只传输apikey,不传输apisecret,用户如需修改直接输入新的就好。
其他信息
@JavaSCU commented on GitHub (Oct 18, 2024):
除非下载,否则不要传输证书本身的数据
@VEADoc commented on GitHub (Apr 17, 2025):
作者一时半会儿可能还没支持的计划。
着急的小伙伴 套个 openresty 处理一下吧,曲线救国了