keybase / keybase/keybase-issues

Ducreux: Disregard keybase.io account passwords. Utilize GPGAuth for login

Open
#531 10 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

Not sure how feasible (nor how desirable) this would be, but just tossing it out there: https://gpgauth.org/projects/gpgauth/

The workflow would be:
1. User claims keybase username
2. Keypair is generated for user (user is prompted for password as part of key generation)
3. Server associates public key with keybase username
4. User now only has to remember one password (private key password) and still has secure login capabilities

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the linked GPGAuth project and the proposed four-step workflow. Determine whether the requested login change is feasible and desirable, then define the scope and acceptance criteria before implementation.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.