3 ms·
There are a few funny things about keybase. First, should they even make it an option to give them your private key? I believe they should not. The thing this
by theboss 13y ago
There are a few funny things about keybase. First, should they even make it an option to give them your private key? I believe they should not.
The thing this doesn't solve is it opens the door for new attacks. What happens if I make a page identical to twitter on twtr.com, that shows a keybase user verifying a fake public key. Keybase could easily accomplish this and this attack isn't that different than other attacks we have seen on the web.
In my opinion...keybase doesn't buy you any new level of security...it's just supposed to be a user friendly way to distribute keys, even though you still have to do the work of verifying them yourself.