💾 Archived View for gemi.dev › gemini-mailing-list › 000790.gmi captured on 2023-12-28 at 15:52:43. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2023-11-04)

🚧 View Differences

-=-=-=-=-=-=-

[tech] coopting keybase for fun & profit

1. Petite Abeille (petite.abeille (a) gmail.com)

Food for thoughts...

PREAMBLE
This is entirely unrelated to either TLS, or TOFU, or the Gemini protocol 
per se.  Just a possible usage convention, agreed between user-agents and 
participating services.


INTRODUCTION
Keybase provides a well thought off platform for identity proof, with easy 
integration, among other things:

Proof Integration
https://book.keybase.io/guides/proof-integration-guide

Plus a full-fledged toolkit:

Command Line
https://book.keybase.io/guides/command-line

And *nix friendly:
Linux
https://book.keybase.io/guides/linux

And open source:
https://github.com/keybase

Thanks Keybase for sharing!


USAGE

In a nutshell, Gemini services could piggyback on Keybase to prove their 
identity and sign all text/gemini they emit.

User-agents could in turn validate such signed text/gemini and visually 
indicate the outcome (exact details skipped for brevity).

That's all. 

Nothing much to it actually. All the hard work has already been done by 
Keybase & friends :) 


P.S.

There is also Keybase's saltpack & sigchain:

https://saltpack.org

https://book.keybase.io/docs/teams/sigchain

https://keys.pub
https://keys.pub/docs/specs/sigchain.html


?0?

Link to individual message.

---

Previous Thread: Enhancing TOFU

Next Thread: It's all in a name