Conversation

Notices

1. Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 14:06:34 UTC Charles Roth MPC

   I have 4 invites for http://keybase.io if anyone would like one. It uses your GPG key to confirm your online identity to others, as well as making it easy to send encrypted messages, files, directories to others.

   • sazius on Mayfirst (saziusmayfirst@social.mayfirst.org)'s status on Saturday, 13-Dec-2014 14:29:06 UTC sazius on Mayfirst

     in reply to
     @encycl Yes, please :-) My email is mats@sjoberg.fi. Or you can privmsg on pump.io, Twitter or XMPP (mats@kapsi.fi).
   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 14:37:55 UTC Charles Roth MPC

     in reply to

     • sazius on Mayfirst

     @sazius sent!

   • sazius on Mayfirst (saziusmayfirst@social.mayfirst.org)'s status on Saturday, 13-Dec-2014 14:53:24 UTC sazius on Mayfirst

     in reply to
     @encycl Thanks!!
   • sazius on Mayfirst (saziusmayfirst@social.mayfirst.org)'s status on Saturday, 13-Dec-2014 16:39:07 UTC sazius on Mayfirst

     in reply to
     @encycl I'm now here: https://keybase.io/sazius
   • Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer@sn.jonkman.ca)'s status on Saturday, 13-Dec-2014 17:15:30 UTC Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

     in reply to

     • Cryptography
     I have a keybase.io invite left too. I'm at https://keybase.io/bobjonkman !crypto But see http://comments.gmane.org/gmane.comp.cryptography.kwcrypto/76
   • kat (boneidol@indy.im)'s status on Saturday, 13-Dec-2014 18:04:01 UTC kat

     in reply to

     • Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca
     • Cryptography
     @bobjonkman @encycl I don't really get what keybase does. Does it distribute to the web of trust?
   • sazius on Mayfirst (saziusmayfirst@social.mayfirst.org)'s status on Saturday, 13-Dec-2014 18:42:00 UTC sazius on Mayfirst

     in reply to

     • kat
     @boneidol If I understand it correctly it's a centralised service to verify peoples' GPG keys. Web of trust doesn't scale very well. Instead it relies on you verifying that you control e.g. a web page, Twitter account etc (I wish it would support free socnets as well). I think it makes perfect sense, could be a good way to get GPG to be used by more people. I wouldn't sign anyone's key based on this, but I'd have a stronger trust (e.g. for communication) than without it.
   • kat (boneidol@indy.im)'s status on Saturday, 13-Dec-2014 19:13:23 UTC kat

     in reply to

     • sazius on Mayfirst
     "tracking" looks interesting. As a way to synchronise keyrings across devices.
   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 20:04:07 UTC Charles Roth MPC

     • pskosinski

     @pskosinski No, it doesn’t. It’s basically a UI on top of curl and gpg.

   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 20:05:16 UTC Charles Roth MPC

     in reply to

     • kat

     @boneidol it is a UI on top of curl, gpg, that brings together online identities and gpg. It also lets you audit the confirmations it makes.

   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 20:06:51 UTC Charles Roth MPC

     • pskosinski

     @pskosinski If you use the cli you are just invoking gpg commands, if you use the browser you encrypt your private key on the client side before delivery to their server. That is optional. The command line is really all you need.

   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 20:07:51 UTC Charles Roth MPC

     in reply to

     • sazius on Mayfirst

     also it makes it easy to encrypt, decrypt, or even generate a gpg key if you don’t have one yet.

   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Saturday, 13-Dec-2014 21:24:58 UTC Charles Roth MPC

     in reply to

     • lnxw48 (Linux Walt)

     @lnxw48 if you encrypt your key and put it on their server then you can use the webUI to sign/decrypt messages (having to decrypt the key each time). This is completely optional. I’m using the CLI and it just adds a friendly, verbose layer to gpg making it easier to use. Also all their code is there to be read.

   • Charles Roth MPC (encycl@vox.a2c3.co)'s status on Sunday, 14-Dec-2014 13:12:05 UTC Charles Roth MPC

     in reply to

     @pskosinski you encrypt it with your key just like any file encryption. Also, it is completely optional It is not necessary to use the tools and service.