Re:Could keybase.io do for crypto what GitHub did for Git?
by skrebbel on Tuesday March 25, 2014 @08:05AM
(#7465284)
And certificate pinning means that they store whatever public key was reported for maria the last time, and complain if they're different? I see that that would help.
[ Parent
| on HN ]
Re:Could keybase.io do for crypto what GitHub did for Git?
by pilif on Tuesday March 25, 2014 @08:56AM
(#7465510)
I would even go farther and include the expected public key directly in the client. That would even defeat attacks where the connection is already compromised the first time you run the client.