-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

There is a thoughtful critique of keybase.io here:

http://blog.lrdesign.com/2014/03/thoughts-on-keybase-io/

I have 2 invites left if you'd like to try it out (preference will go
to those of you I know (in the biblical key-signing sense) or have met
in person).

I do think it is a clever take on PGP user experience... there are a
few red flags, such as (optionally!) storing an encrypted copy of your
private key on their server. yikes.

best, Joe

On 3/21/14, 7:17 PM, Tim Bray wrote:
> Slightly off-topic, but there?s this thing called keybase.io 
> <http://keybase.io> that is doing what feels like a pretty good job
> to me of wrapping up GPG in a palatable UI (web & command line)
> with a key directory so that while I, for example, have never taken
> the trouble to install E2E encryption in my mail, I can see using
> keybase to encrypt particularly sensitive stuff.  Don?t know if
> they?ve got just the right set of features, but it feels like
> there?s an 80/20 point lurking out there somewhere.  My blog on the
> subject is (I hope) an OK introduction:
> https://www.tbray.org/ongoing/When/201x/2014/03/19/Keybase
> 
> 
> On Fri, Mar 21, 2014 at 4:09 PM, Stephen Farrell 
> <[email protected] <mailto:[email protected]>>
> wrote:
> 
> 
> Hi Fred,
> 
> On 03/21/2014 10:21 PM, Fred Baker (fred) wrote:
>> Wouldn?t it be interesting to solve the problem at hand rather 
>> than the one we think we might already know how to solve?
> 
> You're correct. Unfortunately, for mail, despite decades of work on
> e2e security we are no nearer to a technology that is likely to be
> very widely used/deployed. I wish that were not the case, but it
> is. And that's the case for fairly well understood reasons that 
> were rehearsed on this list late last year. (Can't recall when, 
> sorry.)
> 
> At the same time, I'd encourage those brave enough to be working on
> that problem to keep at it - one of you will probably get right 
> eventually.
> 
> S.
> 
> _______________________________________________ perpass mailing
> list [email protected] <mailto:[email protected]> 
> https://www.ietf.org/mailman/listinfo/perpass
> 
> 
> 
> 
> _______________________________________________ perpass mailing
> list [email protected] 
> https://www.ietf.org/mailman/listinfo/perpass
> 

- -- 
Joseph Lorenzo Hall
Chief Technologist
Center for Democracy & Technology
1634 I ST NW STE 1100
Washington DC 20006-4011
(p) 202-407-8825
(f) 202-637-0968
[email protected]
PGP: https://josephhall.org/gpg-key
fingerprint: 3CA2 8D7B 9F6D DBD3 4B10  1607 5F86 6987 40A9 A871


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=huSL
-----END PGP SIGNATURE-----

_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass

Reply via email to