Questions tagged [keybase]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
24 votes
1 answer

How can I verify Keybase's end-to-end encryption between me and a friend?

The premise of end-to-end encryption (E2EE) is that the client is secure and trustworthy, your end devices is secure and trustworthy, but the network and server need not be trusted. You've read all ...
  • 32.3k
4 votes
1 answer

Is there a secure way to host private PGP keys (is keybase's method secure?)

Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...
  • 1,014
1 vote
0 answers

Why is keybase/gui_config.json owned by root?

I have keybase running on my Linux Desktop (Ubuntu 19.04). Since a recent update, the file ~/.config/keybase/gui_config.json is owned by root which is quite irritating. One negative effect of this is ...
3 votes
0 answers

How are Keybase group chats encrypted?

Keybase co-founder Chris Coyne: "Our goal is end-to-end encryption with minimal friction". How does Keybase do this for Keybase group chats? It relates to this question: Which protocols exist for ...
  • 1,841
1 vote
0 answers

Can a user be revoked from Keybase?

We're considering using Keybase for sharing sensitive information across a distributed team. However, one thing is not clear for me: what if someone leaves the company and his access to a directory ...
  • 111
14 votes
2 answers

What do the Keybase pgp import instructions actually do?

I've created a Keybase account and imported the "easy" identities (e.g. Twitter, Reddit). Now it's time to get my PGP key there. I had expected instructions to PGP-sign a specific text from the ...
  • 849
1 vote
1 answer

Why does Keybase sign hashes of previous proofs?

I (think) I understand roughly how Keybase works to establish verifiable connections between a user on Keybase and a set of other identities (e.g. Twitter, GitHub, etc.). One of the steps to ...
  • 333
12 votes
1 answer

How does work?

I've recently found more interest in encryption and security concerning communication. During my research I have found the website . It seems like a storage for public keys but is ...
  • 1,043
8 votes
1 answer

Does using the client keep the Keybase server honest even if you also use the web interface?

According to Keybase's documentation: [The] keybase clients in the wild play a crucial role in keeping the Keybase server honest. They check the integrity of user signature chains, and can find ...
  • 81
5 votes
1 answer

What are the problems with uploading client-side encrypted keys to

I was just reading some articles about And I'm ...
  • 1,755
2 votes
1 answer

Messages encryption and decryption using

Could you please describes to me the security benefits of encrypting and decrypting messages using Do you think that using such thing will be secure, where the encrypted message ...