Hacker News Reader

Why not use Oauth to verify someone on Twitter instead of having someone post a tweet?

How many people are automatically logged in?

The only thing is that you would see the keybase message that you didn't send but it is Twitter and most people don't look back on their recent tweets.

View on HN

Tweets can be seen publicly, unlike OAuth connections. This is true for the other Keybase proofs too.

yes, the premise here is that the Keybase server can be caught lying. If you want twitter user X's public key, Keybase can tell you the key and which tweet to look at to verify it. Then you can check it yourself. OAuth doesn't allow this.

Reply on news.ycombinator.com