keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.9k stars 1.23k forks source link

Don't mount until clicked #3302

Open awnumar opened 8 years ago

awnumar commented 8 years ago

Running Arch Linux. Keybase runs on boot, which is alright, but as soon as I login I'm prompted for my keybase password to unlock the fs and mount it. The problem is that this gets extremely irritating. I don't use it every time I'm logged in so I don't need it mounted every time I login.

It would be better if it just maybe chilled out in the taskbar until clicked.

cjb commented 8 years ago

Hm, we'd like you to be logged in even when you aren't intentionally using it, because that way you can do things like rekey folders for other devices and other people in the background.

We're working on a "save to keychain" option for the passphrase prompt -- would that resolve your concern?

awnumar commented 8 years ago

Ooh using the local keychain is a nice idea.

cjb commented 8 years ago

Which desktop environment do you use? Curious to hear which keychains people are using.

awnumar commented 8 years ago

I use gnome as a window manager but installed the cinnamon DE on top of it. Gnome keyring.

kgizdov commented 8 years ago

I would also like to see this implemented - Gnome keyring.

crosser commented 8 years ago

Please implement "save to keychain"! In my opinion, it is better security when you do not make people remember extra passwords. I for one use password-less login with hardware challenge-response token, that also unlocks the keyring. My keychain is seahorse on Ubuntu/Cinnamon.

maiatoday commented 8 years ago

+1 for this request. I am at the point of uninstalling keybase because it nags me so at startup.

strugee commented 6 years ago

FWIW the only keychain implementations I'm aware of - and certainly the only popular ones - are GNOME Keyring and KDE's KWallet. You can access both of them using the Secret Service D-Bus API: https://specifications.freedesktop.org/secret-service/

libsecret, for example, is an implementation of said D-Bus API.