Hacker News new | ask | show | jobs
by mdb31 1518 days ago
Cool idea, bad implementation.

This really needs to be a local tool: uploading any kind of key material to a remote site is a privacy risk, and the disclaimer that "uploading private keys is obviously discouraged" is not sufficient, as anyone that has every dealt with 'users' will attest...

1 comments

Well, you can have that: https://github.com/badkeys/badkeys

The webpage is mostly just a frontend to the tool.

(Also FWIW I'm not storing any keys that people submit to the form, but of course you can legitimately not trust me on that.)