4 ms·

My impression was that keybase is distributed? Can it be used without talking to keybase's servers?

by pcmonk 10y ago

cjbprime 10y ago
The Keybase server manages giving out usernames, and recording the proof URLs for users, and then your client hits the URLs, checks that the proofs are signed with the appropriate key, and caches them to watch for future discrepancies. Keybase offers decentralized trust, in that the Keybase server can't lie to you about someone's keys -- your Keybase client will trust their public proofs and not the Keybase server -- but it's not a distributed/decentralized service as a whole, because you still receive hints from the server about where proofs live, and learn Keybase usernames from it. (I work at Keybase.)
- agravier 10y ago
  Are you working on a fully decentralized architecture?
  - cjbprime 10y ago
    (Speaking personally, not sure what an official Keybase opinion would be.) No, I don't think the tech is quite there yet. Even just handing out human-readable usernames requires blockchain-style consensus, and we don't have a blockchain being followed along by everyone's machines to adjudicate consensus requests (yet!). The folks at Blockstack Labs are doing fine work in this area, though: https://blockstack.org/ https://blockstack.org/
- mundo 10y ago
  It looks like SSB is crying out for Keybase integration. Any plans for being able to add a SSB identity to my Keybase account?
  - cjbprime 10y ago
    Dunno! Would encourage SSB users to post the request to https://github.com/keybase/keybase-issues/issues/518 https://github.com/keybase/keybase-issues/issues/518.
- erlehmann_ 10y ago
  Does keybase still upload the private PGP key to the keybase server by default? https://github.com/keybase/keybase-issues/issues/160 https://github.com/keybase/keybase-issues/issues/160
  - cjbprime 10y ago
    We're trying to move away from PGP to a per-device key model (keys never leave the client devices): https://keybase.io/blog/keybase-new-key-model https://keybase.io/blog/keybase-new-key-model
    - erlehmann_ 10y ago
      You did not answer my question, but I guess it does not matter with the new strategy. Looks like embrace-extend-extinguish to me – has it always been a goal of Keybase to replace PGP with something keybase-specific or did something change?

My impression was that keybase is distributed? Can it be used without talking to keybase's servers?

by pcmonk 10y ago

My impression was that keybase is distributed? Can it be used without talking to keybase's servers?

The Keybase server manages giving out usernames, and recording the proof URLs for users, and then your client hits the URLs, checks that the proofs are signed with the appropriate key, and caches them to watch for future discrepancies. Keybase offers decentralized trust, in that the Keybase server can't lie to you about someone's keys -- your Keybase client will trust their public proofs and not the Keybase server -- but it's not a distributed/decentralized service as a whole, because you still receive hints from the server about where proofs live, and learn Keybase usernames from it. (I work at Keybase.)

agravier 10y ago
Are you working on a fully decentralized architecture?
- cjbprime 10y ago
  (Speaking personally, not sure what an official Keybase opinion would be.) No, I don't think the tech is quite there yet. Even just handing out human-readable usernames requires blockchain-style consensus, and we don't have a blockchain being followed along by everyone's machines to adjudicate consensus requests (yet!). The folks at Blockstack Labs are doing fine work in this area, though: https://blockstack.org/ https://blockstack.org/
mundo 10y ago
It looks like SSB is crying out for Keybase integration. Any plans for being able to add a SSB identity to my Keybase account?
- cjbprime 10y ago
  Dunno! Would encourage SSB users to post the request to https://github.com/keybase/keybase-issues/issues/518 https://github.com/keybase/keybase-issues/issues/518.
erlehmann_ 10y ago
Does keybase still upload the private PGP key to the keybase server by default? https://github.com/keybase/keybase-issues/issues/160 https://github.com/keybase/keybase-issues/issues/160
- cjbprime 10y ago
  We're trying to move away from PGP to a per-device key model (keys never leave the client devices): https://keybase.io/blog/keybase-new-key-model https://keybase.io/blog/keybase-new-key-model
  - erlehmann_ 10y ago
    You did not answer my question, but I guess it does not matter with the new strategy. Looks like embrace-extend-extinguish to me – has it always been a goal of Keybase to replace PGP with something keybase-specific or did something change?