Keybase is a really cool solution to a problem (or problems?) I don't seem to have. I've had an account for a while but don't really have any reason to use it. Seems like they're pivoting towards being a Slack competitor. Maybe if they open sourced the server portion it could be a chat solution that OSS projects can feel okay about using.
If anything, I really like it as a file-storage option. 200GB (maybe they lowered the amount?) and encrypted and seamlessly integrates with my file-system (except for having to update Dokan on Windows).
2FA is not very helpful if your service relies on encryption for everything (like keybase). It's not possible to use 2FA without another party verifying the authentication code. Keybase could include this (then they would have to verify it), but so far keybase has gone to great lengths to not actually have to hold any secrets for users. They even perform password hashing in the browser instead of on their servers. 2F…
> It's not possible to use 2FA without another party verifying the authentication code. That's not true. You can verify the time based codes or do u2f yourself. You don't need a third party for that.
Right, but there's no way to cryptographically enforce that. All the totp implementations I've seen are symmetric, with the validating server running the same calculation from the same seed. You could do that locally - but then the seed can be extracted or a client can be patched to just not request the code in the first place.
Keybase is a really cool solution to a problem (or problems?) I don't seem to have. I've had an account for a while but don't really have any reason to use it. Seems like they're pivoting towards being a Slack competitor. Maybe if they open sourced the server portion it could be a chat solution that OSS projects can feel okay about using.
If anything, I really like it as a file-storage option. 200GB (maybe they lowered the amount?) and encrypted and seamlessly integrates with my file-system (except for having to update Dokan on Windows).
I really want to love Keybase but nobody (meaning my wife and friends) will use it because the performance for basic chatting sucks abysmally on mobile (plain text chat works but things like pasting an image don't work, for any wife-acceptable value of work). This means I haven't wanted to even suggest trialling it at work, so I haven't used the teams feature at all and without that it's basically an encrypted cloud…
The git integration is indeed something really cool.