An example user page is my page here: https://keyoxide.org/4af679d0aba0ed4b07bf7b6932ca3267c8d187d... Keyoxide is a really nice, but difficult to set up, tool
Why do some of your "profiles" have Xs?
Keyoxide: A privacy-friendly platform to establish your decentralized identity
21–30 of 60 posts
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#22PGP is a battle tested tool, widely available and straightforward to use vis Linux command line. It’s also well supported, eg, by Yubikeys etc.
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#23Earlier quoted context omitted.
Seems like the problem is that their core service simply did not make any money
They never charged. People were willing to pay, but they never offered a for fee service.
I don't want a little money every month, I want a lot of money all at once! -- Russ Hannaman (from Silicon Valley)
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#24I really like the general idea of decentralized identity. Personally I'd prefer to keep my identities on different apps/platforms mostly (99%) separate. It seems to me that giving an adversary a map (especially usernames and email identities) of your online presence is a bad idea especially if they get access to one account and get some private details they may be able to use to socially engineer their way into other…
I'm guessing most people try to obtain the same username on every service, so generally it's not hard to trace people's other identities. And some people, including myself, are happy to have all their identities out there.
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#25Earlier quoted context omitted.
> are superior in every way. Besides the fact that a signify/minisign are a raw key instead of being padded with identity information, in what way are they actually better? Similarly, minisign makes no claims at identity at all. You get a random string, and the user is responsible for knowing which key is for what user. The minisign public key contains nothing but the key. To me, that is a horrible user experience. A…
Nah troll baiting is saying "PGP tools are installed nearly everywhere (except windows) by default" when windows still has almost 80% market share on PCs. Most of the rest are on macos. If you want something to be useful that relies on network effects then they, and mobile users are who you need to accommodate. Linux on the desktop users are a rounding error.
Is 2% a rounding error?
https://gs.statcounter.com/os-market-share/desktop/worldwide
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#26I really like the general idea of decentralized identity. Personally I'd prefer to keep my identities on different apps/platforms mostly (99%) separate. It seems to me that giving an adversary a map (especially usernames and email identities) of your online presence is a bad idea especially if they get access to one account and get some private details they may be able to use to socially engineer their way into other…
I'm not sure what the best implementation of decentralized identity is (although proof-of-personhood systems like BrightID seem interesting[0]), but ideally the different platforms would cryptographically sign statements for you like "This user has a positive reputation on our platform" which you can disclose to other platforms without them being able to learn your username on the original platform. [0] https://www.b…
A tool like TLS Notary could be used to generate proofs of this nature. And do not require the participation of the host / subject of proof.
Has some issues, but I find the approach very interesting.
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#27There's also https://keys.pub/ (from someone ex-Keybase, if I remember correctly). I haven't looked at either closely. Can anyone compare and contrast?
fwiw keys.pub has not had a commit to any of their GitHub repos since July 9 of this year
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#28Earlier quoted context omitted.
Nah troll baiting is saying "PGP tools are installed nearly everywhere (except windows) by default" when windows still has almost 80% market share on PCs. Most of the rest are on macos. If you want something to be useful that relies on network effects then they, and mobile users are who you need to accommodate. Linux on the desktop users are a rounding error.
Is 2% a rounding error? https://gs.statcounter.com/os-market-share/desktop/worldwide
A statistically significant rounding error
Re: Keyoxide: A privacy-friendly platform to establish your decentralized identity
#29Earlier quoted context omitted.
I dunno about windows but minisign is on Mac and Linux, yes. As for 25 years to break it, well, go look at CVEs for GnuPG. There have been many.
The algorithms still stand 25 years later. Is it also available for iOS and Android? FreeBSD? Are there libraries for Perl and PHP?
> The algorithms still stand 25 years later.
They don't, though.