Leace

15 ms·

91.
by Leace 7y ago
To be honest I don't like this confidentiality notes and from what I've read (not a lawyer) they don't have any practical effect either.
92.
by Leace 7y ago
They represent vastly different philosophies. Fastmail is direct alternative to Gmail with good UI and UX but they're based in Australia and against message encryption as it impacts their UX (for example it's not possible to index
93.
by Leace 7y ago
Agreed. I wonder why package managers can't follow Go's lead in re-using DNS system for packages and then offering a service that just indexes what is available. Example indexing service: https://godoc.org/ Exampl
94.
by Leace 7y ago
Agreed. Not to mention Mastodon could've a linkback to Keybase with all data pre-filled (username + instance name). For example in Settings a link "Connect with Keybase".
95.
by Leace 7y ago
> rather than following them from your own instance This all requires people to explicitly copy user/page URL to clipboard and paste it on their instance. "Follow me" buttons or twitter.com/share-link URLs are just no
96.
by Leace 7y ago
> With Twitter you go on and you @ your friends / etc and you're done. With Mastodon you have to figure out where they are and if they're not all in the same place it becomes a nightmare to try and manage. Nope, that'
97.
by Leace 7y ago
> otherwise there would be 10,000 pr0n sites or ad sites. There's a middle ground: you can add integration so that it's available from CLI (`keybase prove ...`) but don't show it in GUI ("select integration") so
98.
by Leace 7y ago
From: https://keybase.io/docs/proof_integration_guide > To send us the config, you can send us the public URL for your config file or attach it directly in a Keybase chat message to @mlsteele or email miles@keyba.se
99.
by Leace 8y ago
Will this always require manual step of sending the proof config to Miles or is there some automation planned? (e.g. scanning of /.well-known file or something like that)
100.
by Leace 8y ago
If you use Yubikey with touch-to-use enabled that'll be basically what you're asking - each authentication will require touching the token.
101.
by Leace 8y ago
I'd love to read about that in detail. Are there any publicly available documents you could share?
102.
by Leace 8y ago
GnuPG is developed by Werner Koch that's German, there are a lot of German startups that work on PGP too (e.g. https://www.cotech.de ). I also used PGP to communicate with customers from Germany but it's not that every
103.
by Leace 8y ago
And on the other side of the globe, "Australian Teens Ignore Anti-Vaxxer Parents by Getting Secret Vaccinations": https://www.thedailybeast.com/australian-teens-ignore-anti-v...
104.
by Leace 8y ago
I don't know if you're still checking this thread but you can search for "Key Transparency" and "CONIKS" that are two projects that store key data in blockchain-like structures. See also comparison: https:&#x2
105.
by Leace 8y ago
If anyone is interested here's the game: https://www.youtube.com/watch?v=i3QMrf-Rfeo
106.
by Leace 8y ago
Dhall is nice that it can natively support configuration migrations via total functions. For example Config1 can be migrated to Config2 by applying a function that always completes. It's also possible to constrain that function so it m
107.
by Leace 8y ago
> because it's not possible due to the email protocol. Or any other protocol that's not crazy paranoid as anonymous PGP messages on alt.anonymous.messages.
108.
by Leace 8y ago
> Solutions like signal or whatsapp also used their "own custom encryption scheme" (in that sense), instead of PGP. But Signal's "own custom encryption scheme" have obvious advantages over PGP, for example forwar
109.
by Leace 8y ago
The article has a point but do know that Tutanota is using their own custom encryption scheme. I can understand they don't want to support PGP if they have something better but judging from their FAQ [0] they just replicated what PGP a
110.
by Leace 8y ago
Thanks for the pointer, the toggle works in stable too but the smoothness you describe just isn't there yet :)
111.
by Leace 8y ago
I wonder how was the Wayland support improved. I'm running Firefox 65 with GTK_BACKEND=wayland and it works quite well but there are still some minor issues where and there.
112.
by Leace 8y ago
Thanks for your post. I've been wondering about federation distribution in various protocols since seeing similar stats for Mastodon [0]. Having federated protocol where vast majority of users still use one server is sub-optimal IMHO (
113.
by Leace 8y ago
> Funny thing, Matrix is still struggling (like every other federated network) to explain the concept of federation. Are there any data on how federated is Matrix? I mean number of users on different servers. From my experience most of p
114.
by Leace 8y ago
The problem of XMPP is just lack of good clients on some platforms, most notably for iOS. For Android there is an excellent Conversations.im client [0] that I've successfully use with my non-technical family and friends. (There is also
115.
by Leace 8y ago
Thanks for the link! Subscribed.
116.
by Leace 8y ago
Instead of ugly " https://www.google.com/amp/www.example.com/amp.doc.html" links as it displays them now when clicking AMP result on Google.com it would display " https://example.com/a
117.
by Leace 8y ago
Keybase diverged so significantly from PGP that one wouldn't say "Keybase is PGP with good UX". You can say "Keybase is encryption with good UX" though.
118.
by Leace 8y ago
SXG is primarily designed for AMP so that the browser can display the origin in the address bar while the content is being served from Google. Currently only one CA provides paid certificates with a special extension so that the cert can be
119.
by Leace 8y ago
> We ended up switching to an XMPP client Could you say what clients do you use? > we plan on creating an XMPP server for ourselves This surprisingly took less effort than I anticipated when I set up mine (from this [0] list) and I ca
120.
by Leace 8y ago
> I wonder what’s the point of the PGP key then. Trust on First Use. Once the key is imported it stays the same. People working for that organization can sign the key to attest it's real (Web of Trust). Although I wonder how would t

More ›