Hacker News new | ask | show | jobs
by mintplant 2618 days ago
> And they want users to trust that central service to decide who is who.

Actually, no, the whole point of Keybase is that you don't have to trust the central server, and can verify all the proofs yourself. The CLI does this automatically.

1 comments

1: They claim the integration is needed because people are too dumb to copy&paste a string.

2: The whole user interface is set up so users believe in what they see in the web interfaces.

And you want to tell me with a straight face that users will do their own crypto foo instead and validate hashes?

Even if the users used that CLI, that does not help. As we saw with Ethereum. They simply pushed out new code that rewrote history.

> And you want to tell me with a straight face that users will do their own crypto foo instead and validate hashes?

Your Keybase client (for whichever platform) will perform the verification for users you follow. There is no need for any manual action and the verification has to happen when you follow someone (by following someone you're attesting that your client performed the verification).

> As we saw with Ethereum. They simply pushed out new code that rewrote history.

Do some basic research. History was never rewritten and new code was never pushed on users. Users voted in favor of the DAO fork, then users voluntarily downloaded newer versions of their wallets in which the respective developers had implemented the agreed upon new rules that moved the stolen money to a recovery account.