4 ms·

you shouldn't put your private key in the cloud..? ..or maybe it is considered acceptable these days? theoretically--if you put your private key in cloud, and y

by makach 10y ago

you shouldn't put your private key in the cloud..? ..or maybe it is considered acceptable these days? theoretically--if you put your private key in cloud, and you pass the passphrase you give everything to the man in the middle for decrypting, but also give them the possibility to impersonating you.

morgante 10y ago
You don't have to put your private key on Keybase servers to use Keybase.
- makach 10y ago
  I noticed that you don't have to, but what is then the benefit of this web site..?
  - defen 10y ago
    Seamless secure file sharing with decent identity authentication - https://keybase.io/docs/kbfs https://keybase.io/docs/kbfs
    - makach 10y ago
      it's only secure if you can ensure that no one has tampered with your keys. if your keys are generated behind a service like this, how can you know that you are safe?
      - defen 10y ago
        You can use Keybase without their ever seeing your private key.
  - morgante 10y ago
    It's an easy way to exchange public keys and to introduce people to crypto.
howderek 10y ago
The private key can be stored in the cloud but is decrypted client-side with JS. If you have nefarious JS running (like from some evil extension), there is a risk, but there is not the opportunity for man-in-the-middle.