https link method should use `.well-known` about keys HOT 9 CLOSED

My gut reaction is worrying that somehow a hacker could get access to that directory more easily, but that doesn't seem right.

I could whitelist that location so both are valid?
https://example.com/keyspub.txt
https://example.com/.well-known/keyspub.txt

from keys.

Both also works

from keys.

I am not sure whether GitHub pages serve folders starting with a dot, so keeping a location outside of .well-known might be a good thing.

from keys.

It can using a _config.yml:

include:
  - ".well-known"

from keys.

This will land in the next version, see #49

from keys.

Fixed in 0.0.47.

from keys.

I have that version (at least my version suggests to use .well-known) but it didn't find the file (literally saying 404). Moving it to the root folder worked.

from keys.

Oops, this is not working. Re-opening.

Thanks for reporting the issue.

from keys.

Fixed in keys-pub/app@73cf025. Will be in next release.

from keys.