search

keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.9k stars 1.23k forks source link

Verify page: "Error: no header found" #8029

Open dabura667 opened 7 years ago

dabura667 commented 7 years ago

https://keybase.io/verify

When inserting a saltpack signed message, it always gives this error.

BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkDbcHiZ z1KmaVGP2MwDu8W IeOGWy46RgXq0vo vyO9lixKuQEJJ5b fHHInZJvGEdYcR1 LSOPcF4y6CV5Fta acr9eYCg7nsn5Zh wvmHAXhD07xJ25i fyH9kLZUBGheVJT 0xfAUDxiCpRViPm dGwZX8zQbjPfEFd mtzEA6WMqTdOGs1 . END KEYBASE SALTPACK SIGNED MESSAGE.

maxtaco commented 7 years ago

Yeah, that's confusing, those pages predate saltpack and are just for PGP. We should fix it

cc: @malgorithms

dabura667 commented 7 years ago

Ideally, you should detect and verify saltpack, and the sign page should have a switch for pgp or saltpack.

The saltpack format is pretty cool imo, and would like to see it easier to sign and verify etc. via the browser.

gbougakov commented 6 years ago

BTW Problem still persists. @malgorithms

seanhelling commented 4 years ago

Encountered this today. My use case is allowing visitors to my personal website to verify my SSH public key.

dhda commented 4 years ago

I'd also like to see the verification page support both PGP and saltpack. I want to be able to verify to my Facebook friends (or on any platform that doesn't explicitly work with the proof system) that my Keybase account is actually me by posting a signed message that they can then verify. It's important for people to be able to verify my signature and my Keybase identity without having to use and install Keybase themselves, and https://keybase.io/verify is a hugely useful tool for this kind of real world interoperability. Posting PGP keys on Facebook in particular is a pain because their formatting breaks the ASCII armor (which saltpack nicely fixes). Bonus is that it would be a tool that makes adopting Keybase much much smoother!

From the Keybase apps (desktop Crypto tools, and the new mobile Crypto tools) I can generate saltpack signatures, which the web verify page doesn't support. From the apps I also can't do anything with PGP, which would be another useful feature so that all these tools are consistent with one another. One specific flow that currently isn't possible is to sign a message on mobile (which only works with saltpack), and then allow non-Keybase users to verify it (because the verify page doesn't work with saltpack).

Threnklyn commented 2 years ago

Bump Still PGP

alexparker commented 2 years ago

Bumpity bump bump

ryanbas commented 1 year ago

I ran into this issue today. The error should at least say the header is unsupported and not that the header doesn't exist.

megavillain commented 10 months ago

Thought I was going crazy.. turns out it's still using PGP, thankfully google lead me here.

devbanana commented 5 months ago

Another vote for this. Just started using keybase and this would definitely be helpful.