Anybody here got invitation codes for keybase ?
Send me an email at [my username with the underscore replaced with a period] at the mail service owned by Google.
Hi!
Setup Keybase.io, GPG and Git to sign commits on GitHub
21–30 of 121 posts
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#22Note that you don't need keybase.io to sign your commits: https://help.github.com/articles/signing-commits-using-gpg/
...with the added security benefit of not uploading your private key on Keybase!
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#23Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#24Earlier quoted context omitted.
...with the added security benefit of not uploading your private key on Keybase!
How is publicly sharing your public key a security flaw?
Keybase would prefer to handle your private key too. You can work with your key offline too, but you have to be aware that this is what you want when setting up- and it's very much not the happy path, so the site will not fully work as you might expect.
Not faulting them, they provide the steps needed, but it might be annoying enough for some people to start uploading private keys.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#25Anybody here got invitation codes for keybase ?
I have a good number of invites as well. You can email me at [keybase_username] at protonmail.com if you'd like one.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#26When does keybase plan to do nightly keydumps like SKS offers?
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#27Earlier quoted context omitted.
How is publicly sharing your public key a security flaw?
Keybase would prefer to handle your private key too. You can work with your key offline too, but you have to be aware that this is what you want when setting up- and it's very much not the happy path, so the site will not fully work as you might expect. Not faulting them, they provide the steps needed, but it might be annoying enough for some people to start uploading private keys.
I've signed up a long time ago (yay early adopters I guess), so I can't comment on the sign up process or setup with your own GPG key nowdays.
But their website works 100% and provides all the functionality if you don't let them host the private key (they give you an easy-to-inspect snippet to paste into your terminal that downloads/signs/uploads things for them. Note, it does do anything when you paste - you need to manually hit enter)
Not disagreeing with you - Just adding my 2c.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#28Is keybase.io still mostly useless because it is not compatible with other key-exchange servers and can't be easily added to Enigma in Thunderbird?
I don't really get what keybase.io is supposed to solve, but it doesn't get in the way of importing keys into Enigmail.
If you are in Enigmail's Keymanager you can import from a URL when the content is well-formatted.
Examples that work:
https://keybase.io/snassar/key.asc https://pgp.samirnassar.com http://keys.gnupg.net/pks/lookup?op=get&search=0x69A75542488...
It would be nice if Keybase made the URL more easily "gettable" instead of hiding it behind 2 clicks.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#29Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#30Is keybase.io still mostly useless because it is not compatible with other key-exchange servers and can't be easily added to Enigma in Thunderbird?
AFAIK keybase.io is not meant as a key exchange server. You should publish your keys using an existing exchange server.
Exactly! It would be nice if keybase.io had a simple click this button to publish your public key to common key exchange servers. But it isn't that hard to do it manually.