3 ms·
is there some way to verify what was actually uploaded, and that it was indeed encrypted properly?
by payomdousti 9y ago
is there some way to verify what was actually uploaded, and that it was indeed encrypted properly?
- ptspts 9y agoYou can ask the same question about copying the .git directory with rsync over SSH, and the answer for that one applies to your original qustion as well: * You can take a look at the packets (using e.g. tcpdump). * You can take a look at what the binaries (rsync, ssh vs. keybase and git-remote-keybase) read and write (using e.g. strace). * You can read the source code. * You can read the white papers and other analyses about the crypto used, and decide if you trust it. The average user probably won't bother with these, because they need time, effort and experience. If you can imagine a fundamentally better possible way for the average user to verify crypto, please let us know.