Issues

• Minor hardening: presence TTL, challenge pool, HKDF salt

  security
  iko-soy/skrepka#10 · Filter by author iko-soy opened on Jun 20, 2026

• No cryptographic versioning / wire-format agility

  enhancement
  iko-soy/skrepka#9 · Filter by author iko-soy opened on Jun 20, 2026

• Unauthenticated /federation/forward allows mailbox injection

  security
  iko-soy/skrepka#8 · Filter by author iko-soy opened on Jun 20, 2026

• Profile replay: stale 'profile' message rolls a contact's cached profile back

  bugsecurity
  iko-soy/skrepka#7 · Filter by author iko-soy opened on Jun 20, 2026

• Gossip presence spoofing redirects a victim's queued messages to attacker

  bugsecurity
  iko-soy/skrepka#6 · Filter by author iko-soy opened on Jun 20, 2026

• detect public keys in messages

  iko-soy/skrepka#4 · Filter by author iko-soy opened on Apr 18, 2026

• payload compression

  iko-soy/skrepka#3 · Filter by author iko-soy opened on Apr 18, 2026

• base64 payload encoding

  iko-soy/skrepka#2 · Filter by author iko-soy opened on Apr 18, 2026