[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: keybase.io

On Fri, Apr 04, 2014 at 02:50:01PM +0100, Jonathan Dowland wrote:
> keybase.io is a thing. This thing lets you, amongst other things, upload a
> copy of your PGP private key to their servers. This is client-side encrypted.
> Discuss.

FWIU, the client-side encryption is javascript provided by the service so
modifiable by the service at will and able to capture/transmit passphrase.

DDs interested in this experimenting with this service are encouraged to NOT
upload the PGP private key that is registered in the Debian Keyring.

If you sign up for the beta and receive an invitation, please consider
generating a new, independent PGP keypair for use with this service.

For the Debian System Administration Team,


Luca Filipozzi

Attachment: signature.asc
Description: Digital signature

Reply to: