Keybase's mission is to make encryption mainstream • Hacker News Board

Re: Keybase's mission is to make encryption mainstream

#81

Post by nickik » Thu, Sep 28, 2017, 8:47 AM UTC

dangero wrote: post #5

Tangent, but the article mentions using Google Authenticator -- I was going to start using that recently, but the reviews indicated it had some really big problems with restoring when you get a new phone etc and Google isn't really maintaining it. https://itunes.apple.com/us/app/google-authenticator/id38849... Can anyone comment on their 2fa approach to google?

Additionally to the other suggestion I can recommend using a Yubikey with NFC together with the Yubico Authenticator. You can easily move between devices.

Re: Keybase's mission is to make encryption mainstream

#82

Post by giancarlostoro » Thu, Sep 28, 2017, 10:57 AM UTC

snorremd wrote: post #79

KGIII wrote: post #77

Earlier quoted context omitted.

I have found Enigmail and Thunderbird to be easy and intuitive. Both are open source. Thunderbird is the email client and Enigmail is the plug-in.

If your work does not require you to use the proprietary exchange stuff in Outlook I would say that Thunderbird with Enigmail is a really convenient solution for encrypted and signed email. Once set up there is very little overhead involved, and if a recipient's email address is in your local gpg database Enigmail will happily encrypt content by default.

Kinda does require the proprietary solution. We do have in the office a paid for Thunderbird plugin (we use Ubuntu unless working on .NET) but for personal use (at home reading work mail) I am limited to using mail on my Macbook Air. Also explaining the process to someone else I know vs just telling them to install an all inclusive mail client that is more seamless would be a different story. Short of telling the whole world to sign up for ProtonMail I would love to see a client that handles email encryption cleanly.

Re: Keybase's mission is to make encryption mainstream

#83

Post by joegosse » Thu, Sep 28, 2017, 1:38 PM UTC

cowpig wrote: post #71

malgorithms wrote: post #31

Earlier quoted context omitted.

When we started Keybase, it was a hobby project to address shortcomings of PGP. Max and I both had just downloaded software packages and wanted to verify them, and it took us hours. At least one of them was bitcoin; I recall staring in awe as Max showed me the countless Gavin Andresen impostors on the popular PGP key servers. We really thought we'd stick up the Keybase directory, make some basic scripts, and move on.…

Why did you choose to tie identity to devices? That idea has always seemed fundamentally flawed to me, and if it wasn't for this flawed core idea, I would be a big fan of what you are doing. I am not my cell phone, my laptop, or any other possession. I am a collection of memories and experiences, so it makes perfect sense for my identity to be tied to that--like a passphrase. This isn't just a philosophical idea. I t…

They also support paper keys, which you could think of as equivalent to your mind (i.e. memorize the key)

Re: Keybase's mission is to make encryption mainstream

#84

Post by lysium » Thu, Oct 05, 2017, 3:13 AM UTC

Jedd wrote: post #75

lysium wrote: post #61

How does keybase make money? I am afraid they are in the business of selling my online identity.

> How does keybase make money? I am afraid they are in the business of selling my online identity. This comes up semi-regularly. Within the recent announcement of Teams [1] it was noted that: "Put most simply, we eventually want to find a way for actual enterprises to pay, while keeping personal and community use free. And any use now is grandfathered in." I've seen similar sentiments in earlier announcements. They a…

Thank you very much for your answer! I'm wondering how key base can find an investor with such a weak hope. Anyways, the privacy policy gave me the answer: everybody can can check my online identities, it is public and not deletable. Or, if the block chain is encrypted, they can sell it in a merger. Too bad!