81–90 of 501 posts
First, bravo for making it happen in a way that is getting people excited. Second, I sincerely wish you the best luck in getting people to pay for it in a way that is sustainable for a business. We built a user interface that made truly secure group file sharing accessible to mere mortals and said mortals were uninterested.
About three months after we shut down the business Edward Snowden made his infamous leak(s) and it became obvious to me that commercial crypto products coming out of the United States would be met with extreme levels of skepticism for some time to come. Any remotely centralized solution to the problems of key distribution and encryption are probably dead on arrival because of the single point of jurisdiction/political failure. It really doesn't matter how open you are (unfortunately).
Two things really stand out to me about this implementation. 1) The trustworthiness of the key exchange doesn't appear to employ a mechanism that protects against a man in the middle. 2) They mention the possibility of in-browser Javascript crypto. These are not small issues. The people who need crypto require rigid, durable implementations that don't gloss over security concerns in favor of usability. Everyone else is just being trendy.
I wish you the best of luck.
I have a /me/private/yourwebsite.com set up to be shared between me and your particular site, the link is set-up when I sign up
when I log in your site, it would look for this directory to be there, in this directory there will be a file with a password hash, the server would load it, and validate the hash of the typed in password against the hash I provide, once the login is successful it would remove this file
this would basically mean that I could have single-use passwords for any site as it would be trivial to have a browser add-on that generates a random password and corresponding hash when I want to log in somewhere, it types the password in the password field on the page and puts the hash in the keybase directory corresponding to it, and alert me if the site does not remove the file after the login.
Plenty of invites over here if anyone would like one https://keybase.io/simonjgreen EDIT: all gone for now, but see https://news.ycombinator.com/item?id=11037629 for more
Have also 8 invites :) EDIT: All gone.
I've been using this for a couple weeks. Along with Zcash, it is the most amazing crypto-engineering project I've seen in years. Imagine being able to share files on an ad hoc basis with anyone -- on any network. Share with someone based on Twitter, on Facebook, or email address. Even better, all with cryptographic proofs of identity, strong crypto at every level, and open source.
So IPFS with cryptography? Although, since Keybase still has a copy of the data, its closer to Dropbox with crypto. https://ipfs.io
It has a link at the bottom -> "latest download (possibly without the filesystem)"
I'm guessing that means not all of the OS builds have it enabled yet?
I also have invites if anyone needs them, reply or find my email in profile.
Why is centralized crypto with a freemium biz model so welcomed? Remember Snowden? Remember parse?