Re: [tor-talk] PGP and Signed Messages,

[Anthony Papillion <anthony@xxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 02/19/2016 12:46 PM, Juan Miguel Navarro MartÃnez wrote:
> El 18/02/16 a las 18:32, Anthony Papillion escribiÃ:
>> What is stopping me from creating a fictitious key for you and
>> then going and registering a Keybase account for that key,
>> pretending to be you and listing all of your social media
>> accounts as my own? Is there some sort of verification that
>> happens?
> 
> 
> Yes, there is a verification process for each supported 
> account/website on Keybase.
> 
> For Twitter, it's a tweet with some verification ID. For GitHub,
> it's a gist called keybase.md. For Reddit, it's a post on
> https://www.reddit.com/r/KeybaseProofs.
> 
> For both last verification processes, it contains some code and a
> PGP message.

All of that makes sense. Good to see that they have verification. But
what about faked accounts? I mean, technically, I suppose if I were
motivated enough, I could create all of those (maybe the user doesn't
even have any SM accounts even). I guess, at that point, it's about
common sense.

>> I'm not a Keybase user (I've been waiting for more than a year
>> and a half, I believe for an invite from them)
> 
> 
> If you are still interested, I could send you one.

I'd love one! I've been wanting to try out Keybase for a while now and
I don't think I'll ever get an invite otherwise. Thank you very much!

Anthony
-----BEGIN PGP SIGNATURE-----
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=Acf9
-----END PGP SIGNATURE-----

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk