undefined | Better HN

0 pointsoedmarap7y ago0 comments

I second this. Would I upload/integrate my public key? Certainly, if it was supported as such. That being said, KB functions just fine without an explicit PGP private key, since each device I install KB on generates its own signing key -- that's good enough for KB to verify my social idents and support initial communication; the more proofs they add the better.

But more serious and nested "secure" communication would be wiser done elsewhere.

0 comments

1 comments · 1 top-level

tialaramex7y ago

> Would I upload/integrate my public key?

I presume this is a typo, but if so it's a grave one.

The naming is very transparent, the intent is that we can give everybody our public keys, they're public, while our private key must remain secret.

(I like to use the U2 Lyric "A secret is something you tell one other person, so I'm telling you" to keep straight the difference between secret keys, which we must share with somebody else, and private keys, which we shouldn't share with anybody, although DH means in practice you may never need to explicitly "tell" anyone the secret keys in hybrid systems)

[Edited because I made the same dumb typo]

j / k navigate · click thread line to collapse