[HN Gopher] API-0.core.keybaseapi.com has expired certificate
___________________________________________________________________
API-0.core.keybaseapi.com has expired certificate
Author : StreamBright
Score : 71 points
Date : 2022-03-25 19:20 UTC (3 hours ago)
(HTM) web link (www.sslshopper.com)
(TXT) w3m dump (www.sslshopper.com)
| defulmere wrote:
| Hmm, valid now but with a self-signed cert. Was the original
| self-signed?
| songgao wrote:
| Yes, this has always been the case. The root CA is embedded in
| the Keybase client:
| https://github.com/keybase/client/blob/master/go/libkb/ca.go
|
| This provides a way to add some protection against a polluted
| trusted CA store.
| defulmere wrote:
| Thanks!
| gnufx wrote:
| Suppose you only want a replacement for the key management part
| of keybase, what is there to be recommended? I know of
| https://keys.pub/ and https://keyoxide.org/ but the former (from
| someone ex-keybase) has no recent activity and a "not audited"
| warning, which at least is good to see.
| udia wrote:
| Observing network errors when attempting to send messages within
| Keybase.
| proactivesvcs wrote:
| For the identity verification part of Keybase - but decentralised
| - Keyoxide may be of interest: https://keyoxide.org/
| ccooffee wrote:
| I found the "What is Keyoxide?" page a useful explanation that
| was missing from the homepage:
| https://docs.keyoxide.org/getting-started/what-is-keyoxide/
|
| I never found the identity/distributed-account thing on keybase
| useful, as I explicitly DO NOT want my accounts linked, but if
| that's your thing, definitely worth checking out.
| pram wrote:
| Pretty sure Keybase is abandonware since Zoom bought them.
| Klathmon wrote:
| Yeah looking at the commit graph for the keybase client shows a
| pretty obvious acquisition date..
|
| https://github.com/keybase/client/graphs/contributors
| ezekg wrote:
| That really sucks to see. I liked Keybase a lot but have
| since abandoned it myself too. Shame.
| pm90 wrote:
| Its a shame since I genuinely loved Keybase. I've just not felt
| the same way about another messaging app. Signal appears to be
| the safest but since WhatsApp is e2e encrypted and most of my
| social network is there already I'm stuck with it.
| ognarb wrote:
| Matrix is also a nice choice. E2ee and decentralized.
| xvector wrote:
| But with poorly audited clients and metadata retention
| issues compared to Signal
| molszanski wrote:
| Check out telegram. It surprisingly awesome in so many ways.
| Ultrafast native client on all platforms, very user friendly,
| time tested, stable, fully packed with features etc.
| Shank wrote:
| I love Telegram, but I want to state it clearly: the
| default chat scheme isn't end-to-end encrypted, which
| Keybase is. Therefore, it's not a drop-in replacement.
| chockchocschoir wrote:
| And also the more obvious difference: Telegram requires a
| telephone number, Keybase did not.
| sirmike_ wrote:
| https://wire.com/en/ is what i have used for years. YMMV.
| GeckoEidechse wrote:
| Yeah I switched away from Wire again due to constant
| notification issues (yes battery saving options are
| disabled on Android). My session has since timed out and
| trying to log back in on either mobile or desktop just
| causes the app to crash.
|
| Also there's no Matrix bridge for Wire compared to Signal.
|
| The multi-account support was nice and is something I'd
| really love to see in Matrix.
| RL_Quine wrote:
| I can't get these annoying people to stop sending me spam
| email, despite having unsubscribed probably 20 times at
| least. If they can't be trusted to not flood out email
| inboxes, they can't be trusted with anything else.
| panick21_ wrote:
| I love the encrypted git and the file system.
| [deleted]
| pxeger1 wrote:
| Reasonable guess. Zoom openly admitted they were basically just
| poaching the team, so it would make sense if they stopped
| working on Keybase.
|
| If it's really abandoned, it's somewhat surprising it's kept
| working this long.
| SXX wrote:
| It's just sad they couldn't just sell the service itself.
| After all someone might acquire and maintain it.
| [deleted]
| mfer wrote:
| Time to move to Matrix? There is e2e messaging there.
| throwra620 wrote:
| atonse wrote:
| Really sad to see Keybase atrophy even though I'm happy for the
| team that got acquired.
|
| I wish they'd just open source the whole thing or donate it to
| the apache foundation or something.
| StreamBright wrote:
| It seems they fixed it.
| [deleted]
| floren wrote:
| It's only a matter of time for Keybase. Sad, because we've been
| using it for work communications since the very beginning... I
| remember talking to colleagues back in the day saying basically
| "I love Keybase, but I'm kind of nervous if they don't have a
| plan to make money". Sure enough: acquihire.
| Rebelgecko wrote:
| Looks like a new cert was issued today. App is working fine for
| me
___________________________________________________________________
(page generated 2022-03-25 23:00 UTC)