keybase / keybase/client

Policy change PGP storage warning is misleading

Open
#24,609 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.2k
Forks
1.3k
Avg merge
12h 58m
Merged PRs (30d)
56

Description

When running `keybase login` today I was confronted with this message about the passphrase policy change:

``` text
Policy change on passphrases

We've gotten lots of feedback that it's annoying as all hell to enter a
Keybase passphrase after restarts and updates. The consensus is you can
trust a device's storage to keep a secret that's specific to that device.
Passphrases stink, like passed gas, and are bloody painful, like passed stones.

Note, however: on this device you have a PGP private key in Keybase's local
keychain. Some people want to type a passphrase to unlock their PGP key, and
this new policy would bypass that. If you're such a person, you can run the
following command to remove your PGP private key.

keybase pgp purge

If you do it, you'll have to use GPG for your PGP operations.

If you're ok with the new policy, you can run this command so you won't
get bothered with this message in the future:

keybase dismiss pgp-storage

Thanks!
```

This message makes it sound as though by running `keybase pgp purge` I can make it so that using my PGP private key(s) requires a passphrase. However, I've determined that I can still use my private keys when I have a network connection because the CLI uses my session with the Keybase API to decrypt and sign using my stored PGP keys.

It may be that the intersection of folks who want to have to use their passphrase to unlock their PGP key and folks who upload their PGP key is small, but I thought this was surprising behavior that isn't clear from the messaging of the policy change text.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the warning during `keybase login`, then compare the stated effects of `keybase pgp purge` with actual use of the stored PGP key while online and offline. The work is done when the warning accurately describes the resulting key and passphrase behavior, or the behavior is corrected to match the message.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, cryptography, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.