3 ms·
Allowing people to verify my message came from me without needing to setup PGP themselves. They can just use /verify and throw my message into it. By using the
by Nadya 10y ago
Allowing people to verify my message came from me without needing to setup PGP themselves. They can just use /verify and throw my message into it.
By using the signature consistently it raises red flags when a post of mine isn't signed or doesn't verify.
Of course - this assumes Keybase has not been compromised, but that isn't an attack vector I worry about.
- synchrone 10y agoThe point of keybase is to distribute trust in them across multiple (social) trust-statements, so you don't even need to trust them Their implementation is supposed to check all those twitter/github/dns trust statements to verify the message.
- Nadya 10y agoThat only works if the message is coming from somewhere that can be linked with Keybase. Say for example I sign a message on Voat rather than Reddit. Then what? There exists thousands of sites that can't be paired with Keybase. Pasting a message into /verify is a lot easier for people than installing GnuPG and verifying it themselves. Still faster and more user friendly even if they already have GnuPG installed.