irina-med
commented
5 years ago { "body": { "key": { "eldest_kid": "010173edc62eab85aed90d8f95e4c9fd8fa46d2967b6f96bc39d3c93fc38ebf01ffe0a", "fingerprint": "56fa4890ed875d0c387b3d30d03408f4478f2aa3", "host": "keybase.io", "key_id": "d03408f4478f2aa3", "kid": "010173edc62eab85aed90d8f95e4c9fd8fa46d2967b6f96bc39d3c93fc38ebf01ffe0a", "uid": "0edffcb92a3a4892ac478c30983c6a19", "username": "irinamedova" }, "service": { "name": "reddit", "username": "irinamedova" }, "type": "web_service_binding", "version": 1 }, "ctime": 1568639834, "expire_in": 157680000, "prev": "686be7d7d941a5902b5fca361b200ea41da46c526b4a5a1a6719fb51f4098835", "seqno": 9, "tag": "signature" }
When I use my default Keybase Stellar wallet to pay in any store outside of Keybase that accepts Stellar, my account id will be logged. This is no big deal, it's how Stellar works.
But this also allows the store or anyone on the internet to identify my Keybase username with all the proofs that this brings, even if they didn't know my Keybase username from the start. Imagine the profiling and tracking you could do in the real world for advertisements etc.
The Keybase federation server makes this possible by allowing reverse account lookups. I think this should only be enabled for an account if you actively opt in for it.