Skip to content
Snippets Groups Projects
  • Bob Mottram's avatar
    f410d0a1
    Retire support for keybase.io gpg version 2.x doesn't appear to work well with... · f410d0a1
    Bob Mottram authored
    Retire support for keybase.io gpg version 2.x doesn't appear to work well with it, but beyond that there's the really concerning issue that the site asks users to upload their *private keys*. Even if the private keys are client side passphrase encrypted this gives that site a full time opportunity to crack private keys. Even if they don't so that, a leak happens and suddenly letter agencies have your private key. Not a good way to go.
    f410d0a1
    History
    Retire support for keybase.io gpg version 2.x doesn't appear to work well with...
    Bob Mottram authored
    Retire support for keybase.io gpg version 2.x doesn't appear to work well with it, but beyond that there's the really concerning issue that the site asks users to upload their *private keys*. Even if the private keys are client side passphrase encrypted this gives that site a full time opportunity to crack private keys. Even if they don't so that, a leak happens and suddenly letter agencies have your private key. Not a good way to go.
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
freedombone-app-dokuwiki 29.32 KiB