4 ms·
This description perfectly captures my impression on Keybase too (especially the part on unwillingness to decentralize their social-media based identities). Fo
by Leace 8y ago
This description perfectly captures my impression on Keybase too (especially the part on unwillingness to decentralize their social-media based identities).
For the record it soon may be possible to use native GnuPG through the browser extension:
> Installer: New optional module "Browser Integration" to register GnuPG as backend for Mailvelope 3.0.
Source: https://www.gpg4win.org/change-history.html https://www.gpg4win.org/change-history.html
But given Keybase's track record I already know they're not interested in that.
- lrvick 8y agoAny trust went out the window when I realized I could pull out my smartcard and continue signing things. My head exploded.
- nickik 8y agoYou just don't seem to understand how the service you are using works and guess what. Its different then pure PG. It was not designed to work with your smart-card as it is not primarily about that. Guess what, other people like me just realized that Keybase was not designed to be used like that and didn't use the smart-card together with Keybase. I guess you can fault them for not saying that explicitly but since the made no mention of smart-cards and didn't evolve the security model in that direction it was pretty clear that that was not what they were about and therefore I did not expect it to be optimal to be used like that.
- lrvick 8y agoThey used my openpgp key to setup my account. They link it on my profile as my key... I guess this gave me some crazy idea this was the key they actually use, not some silently created in memory keys that don't use the openpgp spec at all.