3 ms·

Why wrong? Is there a difference you see between a cloud service like this and PGP keyservers?

• makach 10y ago
  you shouldn't put your private key in the cloud..? ..or maybe it is considered acceptable these days? theoretically--if you put your private key in cloud, and you pass the passphrase you give everything to the man in the middle for decrypting, but also give them the possibility to impersonating you.
  • morgante 10y ago
    You don't have to put your private key on Keybase servers to use Keybase.
    • makach 10y ago
      I noticed that you don't have to, but what is then the benefit of this web site..?
      • defen 10y ago
        Seamless secure file sharing with decent identity authentication - https://keybase.io/docs/kbfs https://keybase.io/docs/kbfs
        • makach 10y ago
          it's only secure if you can ensure that no one has tampered with your keys. if your keys are generated behind a service like this, how can you know that you are safe?
          • defen 10y ago
            You can use Keybase without their ever seeing your private key.
      • morgante 10y ago
        It's an easy way to exchange public keys and to introduce people to crypto.
  • howderek 10y ago
    The private key can be stored in the cloud but is decrypted client-side with JS. If you have nefarious JS running (like from some evil extension), there is a risk, but there is not the opportunity for man-in-the-middle.
• rocqua 10y ago
  Not OP, but there are all these places that are tied quite strongly to my identity. Why not tie my PGP key to them in an explicit and centralized manner.