search

keybase / keybase-issues

A single repo for managing publicly recognized issues with the keybase client, installer, and website.
902 stars 37 forks source link

API request: verify #460

Open bryanburgers opened 10 years ago

bryanburgers commented 10 years ago

There should be a way to send a signed message to the API and get back whether it was authenticated, and which keybase.io user signed it.

Basically, exactly what happens at https://keybase.io/verify, but from the API.

zQueal commented 10 years ago

You mean

keybase verify

?

bryanburgers commented 10 years ago

No, I mean the web api.

malgorithms commented 10 years ago

@bryanburgers - this is a good idea. We probably won't get to it soon, but I'll leave this open. It would be a nice convenience feature for low-priority verifications, where you are okay trusting the server. (The same kinds of things someone might use the website for, except not on the website...)

The "correct" way would be to do all the verification on the client side and check the identity proofs there. But of course that requires having GPG, doing a bunch of scraping, etc.