Hacker News Reader

Comment by Snawoot | Hacker News Reader

Try Keybase (keybase.io). It provides usable apps for all platforms, encrypted file sharing, git, group chats. Most important thing: it does not require to trust keybase servers as trusted party. Trust for your partner key is inferred from various proofs.

Disclaimer: I do NOT work for keybase, just a big fan of it.

View on HN

I've tried, but it still doesn't support yubikeys/smartcards. So people send me messages on keybase chat, but I can't decrypt them :(

Hi, I work at Keybase. There actually is some Yubikey support. But it's not relevant here, because chats use per-device keys, not your PGP key.

Right, so how can I decrypt the chats you sende email notifications about if my base pgp key is on a smartcard?

It will just work. Your PGP key isn't a "base" key, the device keys are. Your PGP key is only used for PGP operations.

https://keybase.io/blog/keybase-new-key-model

The messages are encrypted with your device keys, so you need to be on one of your attached devices. That'll be either a desktop, or mobile device attached to your keybase account.

I use Yubikey 4 with keybase too and my GPG key is stored on smartcard. As far as I know Keybase uses device keys for encryption which are independent from your PGP key (but they are cross-signed if you have PGP key added to your profile). Everything is working well for me. Probably your issues caused by some immature version of app or server API.

Also a fan of Keybase. Overall it is easy to use, but their clients could defiantly use some polish though. The mobile client especially can get annoying since the push notifications don't get grouped together.

How does Keybase make money?

Reply on news.ycombinator.com