Finally add some social proofs in Keybase.
#INSTALL KEYBASE ON IPHONE DIRECTIONS INSTALL#
This will also install the Keybase command line tools. You will be using the PGP key created in GPG.
Install this onto your encryption device. This enhances your security as if your encryption device is lost or stolen you can simply revoke this subkey and generate a new one. If you need to do this, use your master key. This will effectively create a new key pair for daily use that has some limitations: You will be unable to add user IDs, generate subkeys, or sign other keys. Add the signing subkeys and remove the starting one. Once you are done you can place this master key in a bank safe deposit box or perhaps bury it somewhere in your yard ) If you need to make changes to this key, you will have a secure system to do so. Create and store a master GPG key on the live Tails USB. Disconnect from the internet and use this machine to create your master PGP key. If you are using Windows, you are on your own. The basic overview of this approach is as follows: Don't hesitate to do your own research and send me comments on what you find. However, this guide will walk you through a sane approach to handling online privacy and encryption and should prove to be a good starting point for discussion. I do not claim to be a security researcher or cryptographic expert. With the recent Facebook security scandal, people may find this method user-friendly and less overwhelming. This social proof makes encryption possible for the average web user. Instead of relying on signing other people's keys, Keybase lets users create signed statements connecting their public PGP key with their social media accounts. Keybase solves a lot of problems with the PGP "web of trust" model that is messy and never scaled well. Sign main encryption and signing subkeys with this master key and store those on your encryption device for daily use. A nice way to protect oneself is to keep the master key air-gapped and disconnected. Losing control of this can be catastrophic. When using PGP encryption, your master private key should be a closely guarded secret. Finally, Keybase will make managing PGP keys simple and help you keep all your public PGP keys in sync and up to date. Your GPG signatures will be independently verifiable and cryptographically linked to our online identities and devices. After following this guide, you will have a GPG key, secured on a smart card, that can be used to sign git commits and for SSH authentication. 
With a little bit of extra effort, we can extend Keybase to work in tandem with GPG. In the second post of my encryption series, I introduced you to Keybase.
Published: FebruBrandon Kalinowski Keybase Set Up - Option 2
0 kommentar(er)
