I also have a couple of keybase.io invitations: https://keybase.io/inv/23d5ce3afc https://keybase.io/inv/bb28df44d6 https://keybase.io/inv/bb9c4fffa8 https://keybase.io/inv/471c1f67b7 https://keybase.io/inv/44968be986 https://keybase.io/inv/cd6c91d01e https://keybase.io/inv/cdc45eb48f https://keybase.io/inv/41d268d0d6 https://keybase.io/inv/b74615140f https://keybase.io/inv/d90ac04ed3
So do I :) https://keybase.io/inv/8cc6068c31 https://keybase.io/inv/345f0dd4e2 https://keybase.io/inv/2d06418590 https://keybase.io/inv/73fd612897 https://keybase.io/inv/1e9acdc815 https://keybase.io/inv/d5ae0a4b0c
Setup Keybase.io, GPG and Git to sign commits on GitHub
91–100 of 121 posts
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#92Earlier quoted context omitted.
«I don't really get what keybase.io is supposed to solve» Keybase was built to solve the "web of trust" bootstrap problem [1] by leveraging the web of social media profiles a user typically has with simple replicable proofs of social media identity. [1] Arguably the hardest problem in PKI: how do you get user to trust that a public key is for the right person? In the classic PGP/GPG web of trust you do things like "k…
Fair enough, when it comes to coming up with creative ways to solve the web of trust problem. I still do not know what problem keybase.io solves when they allow uploading of private keys.
That would be the second hardest problem in PKI: key escrow and key management. The answers to the questions most average users have like: What do I do if I lose my machine? If I'm logged in from the library or work or my friend's PC? If I use multiple machines every day?
When the "right" answer includes "Print out this long thing, put it in a safe deposit box, and pray you never have to type in this long string of numbers", you immediately lose a lot of potential users; it doesn't quite fit the "Grandparent test" (could your Grandparent use it?).
Absolutely there's a trade-off in trusting a 3rd Party key escrow, but there's an immense usability benefit to average users that want something easier to do and "some security" really can be better than "no security", even if a lot of hard-line paranoid wonks have good reason to believe otherwise.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#93Here are some invites if you are interested. (added more, replaced some used ones) 16 used, here are more https://keybase.io/inv/b24a826ad7 https://keybase.io/inv/6875c4bf5a
Thanks for the invite! I'll reply here with a bunch when mine are available.
Here are a couple I received, a few co-workers took the rest :^)
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#94Earlier quoted context omitted.
Sure. It would be great if they supported both. The suggestion is to use their tooling because it provides a lot of added value, but yes, it would be great if they also provided a standard "dumb" PGP/GPG keyserver, too. Maybe consider contributing to the effort? Quick searched turned up several issues tracking the question: https://github.com/keybase/keybase-issues/issues/327 https://github.com/keybase/keybase-issues…
I'm not interested in giving free labor to a for-profit company whose server source code is proprietary.
I get it. I mostly just meant contributing extra emojis to the issue tracker.
Or if you read the issues you can see that there are some genuine concerns in there that you could help contribute to that would benefit the open source community as a whole, with the side effect of simplifying things for Keybase "as well". Primarily, from skimming, it sounds like the keyserver protocols are not as well documented and standardized as one would assume, running a keyserver from a fresh/new code base is a non-trivial matter with a lot of quirks/bugs to handle. So, who knows, maybe you could contribute to better documenting keyserver quirks, and pushing for better, less quirky, keyserver standards.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#95This is timely, considering Ken's recent hack attempt on his github account. Does anyone know what happens when commit signatures don't match?
For those out of the loop: http://www.kennethreitz.org/essays/on-cybersecurity-and-bein...
Thanks! That post just prompted me to check what password is on my DNS account, and it turns out to be an insecure one, so I'm fixing that right now.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#96Anybody here got invitation codes for keybase ?
I have a bunch. My keybase is https://keybase.io/dougalsutherland, email is dougal at gmail.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#97Earlier quoted context omitted.
...with the added security benefit of not uploading your private key on Keybase!
You can use Keybase with GPG without letting it handle your private key. (I do.)
You can but last time I used it the first option you were presented with was giving keybase your key. I don't know if that's changed years later because I closed the app at that point, I wasn't interested in using or encouraging others to use such a thing. The guy pointing this out was downvoted and I frequently see the fact that its possible to not give them your key presented as somehow making it acceptable that they ask for it.
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#98If anyone wants in, here are 5 invite links. [Edit: all used up.] Each works for only one signup, so hurry up :-) By the way, most users get around 20 free invites shortly after signing up. If one of the links above opened your account, why not share five of your own invites afterwards?
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#99If anyone wants in, here are 5 invite links. [Edit: all used up.] Each works for only one signup, so hurry up :-) By the way, most users get around 20 free invites shortly after signing up. If one of the links above opened your account, why not share five of your own invites afterwards?
Re: Setup Keybase.io, GPG and Git to sign commits on GitHub
#100If anyone wants in, here are 5 invite links. [Edit: all used up.] Each works for only one signup, so hurry up :-) By the way, most users get around 20 free invites shortly after signing up. If one of the links above opened your account, why not share five of your own invites afterwards?
here's some more: https://keybase.io/inv/e2d4bf61e4 https://keybase.io/inv/c04b18c7c3 https://keybase.io/inv/e0f10b0fea https://keybase.io/inv/ab432f0ab7 https://keybase.io/inv/923f343c20 https://keybase.io/inv/27a2dbe5ee https://keybase.io/inv/6dc9197192
only 1 left of these:
https://keybase.io/inv/c04b18c7c3