[colug-432] Keybase.io observations

[FiL Farris]

January 2014 Linux Journal was all about security and I THINK there was
article in there explaining the basics of it & its uses (pgp/gpg).

Unix is basically a simple operating system.  But you have to be a genius
to understand the simplicity.  D.R.


On Mon, Apr 7, 2014 at 12:11 PM, Dan Kaiser <dank2878 at gmail.com> wrote:

> Does anyone in the group have advice on where new users should go for
> remedial education in PGP/GPG and the benefits of Keybase.io?
>
> I've read the about blurb on the KB site, and get that it is about
> connection/encryption key sharing, and I feel like I should really want one
> of the KB  invites, but I'm not going to ask for one until I can really use
> it.
>
> Thanks,
> On Apr 7, 2014 11:32 AM, "Rick Troth" <rmt at casita.net> wrote:
>
>> friends --
>>
>> I'm pretty geeked about Keybase.io and excited to see more of us on it.
>>
>> Expanding the global web-of-trust helps everyone.
>> Have been wanting to see more PGP/GPG action at regular COLUG meetings.
>> Am thinking we should at least mention "opportunistic countersigning" at
>> most meetings. That is, if anyone present is in need of signatures or is
>> willing to sign, make a point to do so after the meeting or during a
>> break. (Quick face-to-face without the drawn out formality of a key
>> signing party. Works well for two or three at a time.)
>>
>> Keybase.io offers alternative assurance methods. If you can prove that
>> you own various internet resources, there's a good chance the related
>> public key really belongs to you. Makes sense.
>>
>> But I'm still only "tracking" one person in KB space. I won't track
>> someone who's public key I did not vet with the usual face-to-face
>> dance. Doesn't mean I won't use a public key I got from KB, just that I
>> won't "sign" it (which is what tracking sort of implies).
>>
>> I noticed that public keys on KB don't have PGP/GPG signatures of people
>> you track. Am realizing (now!) that makes sense because KB tracking is
>> not the same as the traditional PGP signing.
>>
>> -- R; <><
>>
>>
>>
>> _______________________________________________
>> colug-432 mailing list
>> colug-432 at colug.net
>> http://lists.colug.net/mailman/listinfo/colug-432
>>
>
> _______________________________________________
> colug-432 mailing list
> colug-432 at colug.net
> http://lists.colug.net/mailman/listinfo/colug-432
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.colug.net/pipermail/colug-432/attachments/20140407/95b1ea11/attachment.html