6 ms·
"Centralised Crypto" in what sense? Unless I'm very much mistaken, your private key never leaves your control - signing/encryption is done client-side.
by JosephRedfern 11y ago
"Centralised Crypto" in what sense? Unless I'm very much mistaken, your private key never leaves your control - signing/encryption is done client-side.
- drudru11 11y agoThey are the trusted source for my public key.
- darklajid 11y agoAre you talking about the announced file storage service here? Or about the "drudru claims to be foobar on Twitter" service? The former should be good - that sounds like a smart client in front of a dumb server. The latter is a different problem and as far as I'm aware the service is merely aggregating proves - and can link to those. Verify them?
- floatboth 11y agoThe client verifies the proofs!
- JeremyBanks 11y agoThe entire system is architected so that you don't need to trust them for anything, beyond the trust you generally need to have in open-source developers. What is a specific scenario that concerns you?
- OJFord 11y agoOne _can_ host their private key(s) on Keybase (you need to to use in-browser tools) but you don't have to; can instead use Keybase cli, or gpg directly.