maybe there's some key derivation i'm missing, but what about the private key stored on your servers for web-ui signing, etc?
-
-
-
Our old encrypted pgp private key store isn’t used for any of it. Only device generated keys.
-
thanks, for some reason i thought the two keypair were connected somehow :) my bad
- 1 more reply
New conversation -
-
-
I run my own Git repo only accessable via ssh. I win.
-
So do I, but if your server gets hacked it's all plaintext.
-
So next you encrypt the volumes, remove all non-essential services, and don't maintain private keys on a central server like keybase.io
-
keybase doesn't have the private keys unless you opted in and gave them yours.
-
Yes, and the very fact that they make that possible, and encouraged people tells me what about them?
-
I don't know what it tells you about them, but it's not true to say they have all the private keys
-
Can't please everyone. But: keys in our old encrypted PGP key sync feature (which I'll happily defend) aren't used at all for chat/kbfs/git.
End of conversation
New conversation -
-
-
It's not blockchain related for once!
-
Git is a blockchain ;)
-
And already decentralized despite what many projects try to say
End of conversation
New conversation -
-
-
Nice! A tool like this needs the ability to do user-friendly recovery so it can go mainstream. Let's chat!http://fb.me/recovery
Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
Can the
@KeybaseIO encrypted git repos be cloned to a mobile device?Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
Awesome.
Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
nice
Thanks. Twitter will use this info to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.