Questions tagged [keybase]
The keybase tag has no usage guidance.
11 questions
24
votes
1
answer
3k
views
How can I verify Keybase's end-to-end encryption between me and a friend?
The premise of end-to-end encryption (E2EE) is that the client is secure and trustworthy, your end devices is secure and trustworthy, but the network and server need not be trusted. You've read all ...
4
votes
1
answer
823
views
Is there a secure way to host private PGP keys (is keybase's method secure?)
Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...
1
vote
0
answers
157
views
Why is keybase/gui_config.json owned by root?
I have keybase running on my Linux Desktop (Ubuntu 19.04). Since a recent update, the file ~/.config/keybase/gui_config.json is owned by root which is quite irritating. One negative effect of this is ...
3
votes
0
answers
425
views
How are Keybase group chats encrypted?
Keybase co-founder Chris Coyne: "Our goal is end-to-end encryption with minimal friction". How does Keybase do this for Keybase group chats?
It relates to this question: Which protocols exist for ...
1
vote
0
answers
151
views
Can a user be revoked from Keybase?
We're considering using Keybase for sharing sensitive information across a distributed team.
However, one thing is not clear for me: what if someone leaves the company and his access to a directory ...
14
votes
2
answers
8k
views
What do the Keybase pgp import instructions actually do?
I've created a Keybase account and imported the "easy" identities (e.g. Twitter, Reddit). Now it's time to get my PGP key there.
I had expected instructions to PGP-sign a specific text from the ...
1
vote
1
answer
229
views
Why does Keybase sign hashes of previous proofs?
I (think) I understand roughly how Keybase works to establish verifiable connections between a user on Keybase and a set of other identities (e.g. Twitter, GitHub, etc.). One of the steps to ...
12
votes
1
answer
2k
views
How does Keybase.io work?
I've recently found more interest in encryption and security concerning communication.
During my research I have found the website https://keybase.io/ . It seems like a storage for public keys but is ...
8
votes
1
answer
311
views
Does using the client keep the Keybase server honest even if you also use the web interface?
According to Keybase's documentation:
[The] keybase clients in the wild play a crucial role in keeping the Keybase server honest. They check the integrity of user signature chains, and can find ...
5
votes
1
answer
739
views
What are the problems with uploading client-side encrypted keys to keybase.io?
I was just reading some articles about keybase.io:
http://www.makeuseof.com/tag/keybase-wants-bring-encryption-masses-heres/
http://blog.lizdenys.com/2014/03/31/refusing-to-verify-myself/
And I'm ...
2
votes
1
answer
1k
views
Messages encryption and decryption using Keybase.io
Could you please describes to me the security benefits of encrypting and decrypting messages using Keybase.io.
Do you think that using such thing will be secure, where the encrypted message ...