Issues

• Combine welcome bundle and requestKeys into one request

  freedomofpress/securedrop-protocol#451 · Filter by author rocodes opened on Oct 22, 2026

• Specify journalists' revoked / expired / active keys in welcome roster

  freedomofpress/securedrop-protocol#450 · Filter by author asraa opened on Oct 21, 2026 · v0.4

• Centralized attachments for cloud deployments

  freedomofpress/securedrop-protocol#449 · Filter by author lsd-cat opened on Oct 21, 2026

• Attachments download restrictions to journalists only

  freedomofpress/securedrop-protocol#448 · Filter by author lsd-cat opened on Oct 21, 2026

• follow-up: replace hpke::new with panic safe construction

  freedomofpress/securedrop-protocol#438 · Filter by author asraa opened on Oct 19, 2026
  

• PIR requirements and constraints

  freedomofpress/securedrop-protocol#437 · Filter by author lsd-cat opened on Oct 18, 2026

• PIR for message fetching proposal

  freedomofpress/securedrop-protocol#436 · Filter by author lsd-cat opened on Oct 16, 2026
  4

• specify revocation of short-lived epoch keys

  freedomofpress/securedrop-protocol#432 · Filter by author asraa opened on Oct 13, 2026 · v0.4
  1

• model epoch-based keys

  formal analysis
  Task

  freedomofpress/securedrop-protocol#431 · Filter by author cfm opened on Oct 13, 2026

• When is it acceptable for proofs (like tests) to fail?

  needs/discussionverification
  freedomofpress/securedrop-protocol#430 · Filter by author cfm opened on Oct 13, 2026
  1

• doc: add file explaining how to exercise the demo

  freedomofpress/securedrop-protocol#427 · Filter by author redshiftzero opened on Oct 8, 2026

• make libcrux-version also needs to handle multiple crate versions in the tree

  verification
  Bug

  freedomofpress/securedrop-protocol#424 · Filter by author cfm opened on Oct 8, 2026
  

• what should happen when the server hits MAX_MESSAGES?

  freedomofpress/securedrop-protocol#423 · Filter by author redshiftzero opened on Oct 8, 2026

• decorrelate challenge rounds from message fetches

  freedomofpress/securedrop-protocol#420 · Filter by author redshiftzero opened on Oct 7, 2026 · v0.5

• make hax fails under CONTAINER=1

  verification
  Bug

  freedomofpress/securedrop-protocol#418 · Filter by author cfm opened on Oct 6, 2026
  1

  

• Clear, stable interface/APIs with plain language documentation

  documentationrefactoring
  freedomofpress/securedrop-protocol#413 · Filter by author rocodes opened on Oct 4, 2026

• [Server, api] Autonomous vs fpf-signed enrollment should return different response types

  refactoringserver
  freedomofpress/securedrop-protocol#412 · Filter by author rocodes opened on Oct 4, 2026
  1

• parametrize MOCK_NEWSROOM_ID

  freedomofpress/securedrop-protocol#409 · Filter by author redshiftzero opened on Oct 2, 2026
  1

• spec: delete consumed ephemeral private keys

  freedomofpress/securedrop-protocol#408 · Filter by author redshiftzero opened on Oct 2, 2026

• shuffle or sort challenges

  security
  freedomofpress/securedrop-protocol#407 · Filter by author redshiftzero opened on Oct 2, 2026 · v0.4

• remove all unwraps, check all expects

  freedomofpress/securedrop-protocol#402 · Filter by author redshiftzero opened on Oct 1, 2026 · v0.4

• how to purge spam submissions from the server

  freedomofpress/securedrop-protocol#400 · Filter by author redshiftzero opened on Oct 1, 2026

• Attachments encryption should support streaming/chunks

  freedomofpress/securedrop-protocol#398 · Filter by author lsd-cat opened on Sep 30, 2026
  1

• Storage DoS on message submission: message unavailability

  security
  freedomofpress/securedrop-protocol#395 · Filter by author asraa opened on Sep 28, 2026
  2

• ci: keep track of code TODOs and issues with https://github.com/marketplace/actions/todo-backlinks

  CIproposal
  freedomofpress/securedrop-protocol#394 · Filter by author asraa opened on Sep 25, 2026
  2