search

keybase / keybase-issues

A single repo for managing publicly recognized issues with the keybase client, installer, and website.
902 stars 37 forks source link

How do I prove Facebook without enabling Facebook Platform? #2674

Open Mikaela opened 7 years ago

Mikaela commented 7 years ago

I get to where I am asked to make a Facebook post and trying to click that link I get this request:

turn on platform - mozilla firefox_303

I am not interested in enabling Facebook platform even for Keybase (and there are far more useful services that would use Facebook platform), so how do I proof my "ownership" of my account without letting all kinds of apps (including those that "friends" use) access whatever I have entered to Facebook?

Update on 2018-09-05: I have removed my Facebook account months ago, so this issue doesn't concern me anymore, but I am keeping this open as this affects everyone using Keybase and Facebook even if only the users blocking Facebook App Platform become aware of this.

zQueal commented 7 years ago

Facebook platform is a blanket term used to describe a set of API tools which third party application developers use to interface with a user's facebook account. Without enabling it, I highly doubt Keybase would be able to verify the authenticity of a post, and scrape it to ensure the proof is still online.

jeffmcneill commented 7 years ago

@zQueal that is not strictly true. Keybase scrapes tweets just fine, without requiring app access to a twitter account. If someone's facebook post wtih Keybase public key/link were made public, it should have no trouble finding it.

I too, like @Mikaela, don't want to turn on the platform for Facebook (and I won't). However, there are people I am connected to on Facebook who may want to be aware I am on Keybase. Therefore, some Twitter-like solution is definitely desirable, for some subset of people.

I would call this a bug, rather than an enhancement request. The bug is in requiring platform access, a fix for the bug is in not requiring platform access, but instead implementing the system in a similar way to the current Twitter account verification.

I want to add a final comment along the lines that @Mikaela mentioned, which is that enabling platform access in Facebook creates privacy concerns. Surely Keybase, as a security/privacy tool, doesn't mean to force those concerns on their users.

dfilskov commented 6 years ago

I agree completely with @jeffmcneill and @Mikaela

imathew commented 6 years ago

Yes, is there any reason we can't just link to a public post, as I have with other services?