News for hackers. Stuff that matters.
Re:Setup Keybase.io, GPG and Git to sign commits on GitHub by WorldMaker on Monday August 15, 2016 @10:54AM (#12290815)
Keybase has a pretty good command line tool and commands very similar to ones in the article we are commenting upon can be used to grab the public key of a Keybase user using just their Keybase username.

It should probably be easy to presume that if a user gives you their Keybase username they are telling you it's the easiest way to get their most up-to-date key(s) and revocations and that they are actively managing it. (Pretty much the same assumption any time anyone ever suggests to you a specific keyserver over just a fingerprint and keyserver roulette; that's probably the keyserver they actively check/update/revoke and will be the timeliest.)

Re:Setup Keybase.io, GPG and Git to sign commits on GitHub by davexunit on Monday August 15, 2016 @11:19AM (#12291027)
>Keybase has a pretty good command line tool

Another example of the walled garden. You need their tool, whereas you can just use gpg with every other keyserver.

Re:Setup Keybase.io, GPG and Git to sign commits on GitHub by WorldMaker on Monday August 15, 2016 @11:51AM (#12291211)
Sure. It would be great if they supported both. The suggestion is to use their tooling because it provides a lot of added value, but yes, it would be great if they also provided a standard "dumb" PGP/GPG keyserver, too.

Maybe consider contributing to the effort?

Quick searched turned up several issues tracking the question:

https://github.com/keybase/keybase-issues/issues/327

https://github.com/keybase/keybase-issues/issues/890

https://github.com/keybase/keybase-issues/issues/1266

Re:Setup Keybase.io, GPG and Git to sign commits on GitHub by davexunit on Monday August 15, 2016 @01:16PM (#12291799)
I'm not interested in giving free labor to a for-profit company whose server source code is proprietary.
Re:Setup Keybase.io, GPG and Git to sign commits on GitHub by WorldMaker on Monday August 15, 2016 @04:12PM (#12293044)
I get it. I mostly just meant contributing extra emojis to the issue tracker.

Or if you read the issues you can see that there are some genuine concerns in there that you could help contribute to that would benefit the open source community as a whole, with the side effect of simplifying things for Keybase "as well". Primarily, from skimming, it sounds like the keyserver protocols are not as well documented and standardized as one would assume, running a keyserver from a fresh/new code base is a non-trivial matter with a lot of quirks/bugs to handle. So, who knows, maybe you could contribute to better documenting keyserver quirks, and pushing for better, less quirky, keyserver standards.