Questions tagged [keybase]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
11
votes
0answers
160 views

How can I verify Keybase's end-to-end encryption between me and a friend?

The premise of end-to-end encryption (E2EE) is that the client is secure and trustworthy, your end devices is secure and trustworthy, but the network and server need not be trusted. You've read all ...
3
votes
1answer
93 views

Is there a secure way to host private PGP keys (is keybase's method secure?)

Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...
1
vote
0answers
54 views

Why is keybase/gui_config.json owned by root?

I have keybase running on my Linux Desktop (Ubuntu 19.04). Since a recent update, the file ~/.config/keybase/gui_config.json is owned by root which is quite irritating. One negative effect of this is ...
3
votes
0answers
170 views

How are Keybase group chats encrypted?

Keybase co-founder Chris Coyne: "Our goal is end-to-end encryption with minimal friction". How does Keybase do this for Keybase group chats? It relates to this question: Which protocols exist for ...
1
vote
0answers
46 views

Can a user be revoked from Keybase?

We're considering using Keybase for sharing sensitive information across a distributed team. However, one thing is not clear for me: what if someone leaves the company and his access to a directory ...
8
votes
2answers
3k views

What do the Keybase pgp import instructions actually do?

I've created a Keybase account, and imported the "easy" identities (e.g. Twitter, Reddit). Now it's time to get my PGP key there. I had expected instructions to PGP-sign a specific text from the ...
1
vote
1answer
119 views

Why does Keybase sign hashes of previous proofs?

I (think) I understand roughly how Keybase works to establish verifiable connections between a user on Keybase and a set of other identities (e.g. Twitter, GitHub, etc.). One of the steps to ...
9
votes
1answer
1k views

How does Keybase.io work?

I've recently found more interest in encryption and security concerning communication. During my research I have found the website https://keybase.io/ . It seems like a storage for public keys but is ...
8
votes
1answer
190 views

Does using the client keep the Keybase server honest even if you also use the web interface?

According to Keybase's documentation: [The] keybase clients in the wild play a crucial role in keeping the Keybase server honest. They check the integrity of user signature chains, and can find ...
5
votes
1answer
604 views

What are the problems with uploading client-side encrypted keys to keybase.io?

I was just reading some articles about keybase.io: http://www.makeuseof.com/tag/keybase-wants-bring-encryption-masses-heres/ http://blog.lizdenys.com/2014/03/31/refusing-to-verify-myself/ And I'm ...
2
votes
1answer
817 views

Messages encryption and decryption using Keybase.io

Could you please describes to me the security benefits of encrypting and decrypting messages using Keybase.io. Do you think that using such thing will be secure, where the encrypted message ...