FR: Gmail Integration

[apanzerj]

As somebody who wants to use web-based gmail and keybase, a real solid keybase/gmail integration would set this system apart from all the others. Signing/encrypting + contact integration and the ability to be notified when my contacts join Keybase (kind of like the way google+ works now).

-ajp

[xxdesmus]

+1 This would be killer.

[malgorithms]

related: I began work on - but have put on hold for other stuff - a general Chrome extension which allows signing / verifying / encrypting / decrypting. It would be gmail aware.

[jaxzin]

@malgorithms I was about to start on a similar Chrome extension, is this something you would be willing to open-source so I can help?

[malgorithms]

@jaxzin cool!

well, yes, in theory, although it's in a very broken state and based on a bunch of Keybase code that's all outdated now. I think it would be better to wait a couple weeks until I can return to it. But I look forward to collaborating on it, if you're game.

[jaxzin]

@malgorithms I'm game. :+1:

[malgorithms]

great. I think the extension will be very cool. I actually got signing / verifying / decrypting / encrypting all working in it (pretty ugly though), sessions, some basic API calls, etc. Much of it is broken now, I'm certain, but I can clean it up when I return to it.

I think the big difficulties will be:

1. staying on top of DOMs that we target such as gmail's. They'll change out from underneath us, and the more we support, the harder it will be to keep from breaking. I didn't even begin to tackle this.
2. signing in cleartext anywhere on the web. If you want to post a random bitcoin address on a site, or make some kind of announcement in a forum, etc, you should be able to sign it with the extension easily. But we have to figure out what the signed text will be like. It can't be armored, because it needs to be generally readable for those without the extension. So it needs to be cleartext. But then the random server will mangle all the random chars. So then in theory we could have cleartext PLUS a fully armored repeat of the data, and the extension could make sure they align and highlight differences or something. But this is all getting ugly. But to be clear: a Keybase signed item on the web should be reabable by those without the extension, with an easy to follow link to the signer's page to verify it.

And finally, does the extension do something cool where you can do a totally detached signature as a link, and it knows how to check them? Something where you highlight some text -- say a tweet or some other small thing -- and it:

• signs it, but hosts the full signed statement on keybase, because it's too big for the location
• and puts back into the page just the text with a detached signature link at the end.

people without the extension will see the normal text with a link through to keybase with a way to verify in the browser or join. People with the extension will get it all verified automatically because the extension can query the server for the full signed statement, verify it, and make sure the text matches what the user is seeing. (Again, server mangling issues need to be highlighted.)

This would be very cool because people could sign tweets and all kinds of other little things without cluttering up the text.

Lots to think about...

[pierce403]

What would be neat would be if keybase support were added to transparently work with Mailvelope.

http://www.mailvelope.com/ https://github.com/toberndo/mailvelope

It's really well done (does encryption/signing in separate domain etc, hardened against XSS issues), but the key management (adding new keys for friends etc) is a bit clunky, so really, integrating with keybase.io is the main missing feature.

[zQueal]

Looks like Gmail is already working on this.

[xxdesmus]

That would be huge.

[jashkenas]

GMail integration would potentially be a killer app for me. We often have sensitive things to discuss in the newsroom, and the current status-quo of sometimes-Adium-OTR and sometimes-apple-mail-GPG doesn't really work ... especially now that we've standardized on GMail.

[jbenet]

anybody could make a chrome / FF extension to encrypt/decrypt/sign text on pages. (either selected text, or just scan the page for you)

[wathrog]

+1 years that I'm looking for something similar

[ghost]

For Firefox (and also Chrome, but never tested it there) there is an extension WebPG, which seems to be doing exactly that. But I had to deactivate it, since it's DOM-search algorithm seemed to slow down my browser by a huge amount. :-( Since it is Open Source (GNU-GPL) it could be forked and be made keybase-aware

[philin]

@malgorithms is the WIP extension on Github somewhere? and how's the status of it?

[malgorithms]

It's still on hold from my end. The code I wrote early on isn't worth releasing as it no longer matches Keybase's API. I hope to return to this, but it won't be for at least a couple months.

If any of you are on IOS, you should check out Gabriel's work on KeyUp:

https://rel.me/keyup

It will be open source soon and he's officially joining us at Keybase. I know this isn't exactly what you're asking for, but if you're on this issue, you might like it.

[flotob]

Mailvelope and Keybase really have to collaborate here, it'd be maximum benefit in shortest amount of time. they are really complementary services!!!! let's forge a marriage here, please :-)

[waldyrious]

Mailvelope and Keybase really have to collaborate here, it'd be maximum benefit in shortest amount of time. they are really complementary services!!!! let's forge a marriage here, please :-)

Agreed. Pinging @mailvelope and @toberndo for feedback.

[toberndo]

Agreed. Pinging @mailvelope and @toberndo for feedback.

Would be happy to discuss possible integration with @malgorithms and @maxtaco at the PGP summit in April.

[apanzerj]

Hey Guys,

Any updates/news on this? I know for a fact that if you guys built the integration my company would definitely pay to use it (as a corporation).

[sit]

This may be helpful for building Gmail integration https://www.inboxsdk.com/

[rubienr]

+1

[jweaver]

+1, and also very interested.

[zQueal]

Mailvelope and Keybase really have to collaborate here, it'd be maximum benefit in shortest amount of time.

In the interim you can get Mailvelope to work with any Keybase public key by adding it manually. Obviously this isn't an amazing solution, but until the Go client is pushed I doubt work on anything else will be completed.

[philihp]

:+1:

[0x4445565A]

@malgorithms I started a google chrome extension that supports encrypting via public keys and is using the Keybase.io API for an auto complete (btw that works amazing).

If you're interested in the repo it's here.. https://github.com/tehbmar/easy-keybase.io-encryption-extension

I also have it as a chrome extension in the chrome store. https://goo.gl/dPQqU2

[zQueal]

@tehbmar, I have to say this thing works amazingly! Pretty much exactly what's needed, IMHO. It's a "get stuff done, then get out of the way" extension.

Great work!

[0x4445565A]

@zQueal Thank you very much I popped it out over two nights (right now and yesterday) so the code isn't exactly how I want it but I haven't found any bugs and it works pretty well without requesting too many permissions. I did just add a new feature where you can copy text and have it prepopulate the encryption form which could be hacked and used for something like gmail integration.

[malgorithms]

wow, very cool!

[malgorithms]

btw, I saw you tweeted at me, @tehbmar , but the link to pastebin 404's.

[apanzerj]

that's awesome

[0x4445565A]

@malgorithms I wonder if it's n issue with pastebin detecting pgp messages as spam on occasion. Anywho https://pastebin.com/raw/ef7PvkAC (testing again)

[malgorithms]

cool, got it!

On Jan 21, 2016, at 4:35 PM, Brandon Martinez notifications@github.com<mailto:notifications@github.com> wrote:

@malgorithmshttps://github.com/malgorithms I wonder if it's n issue with pastebin detecting pgp messages as spam on occasion. Anywho https://pastebin.com/raw/ef7PvkAC (testing again)

— Reply to this email directly or view it on GitHubhttps://github.com/keybase/keybase-issues/issues/469#issuecomment-173715313.

[CharlyRipp]

An extension to Inbox (by Gmail) would be great, but also as an extension on the mobile platform would be ideal. I've yet to find a decent mobile solution without uprooting to another mail provider.

[safaci2000]

This is not as much a keybase solution but this looks interesting and seems open source: https://flowcrypt.com/