Bitcoin Forum

Other => Meta => Topic started by: twister on April 13, 2015, 09:56:59 PM



Title: PGP key
Post by: twister on April 13, 2015, 09:56:59 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?


Title: Re: PGP key
Post by: EcuaMobi on April 13, 2015, 09:59:04 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

People (myself included) normally post it on Reputation (https://bitcointalk.org/index.php?board=129.0) and ask one or 2 trusted members to quote it so if a hacker takes your account editing your post wouldn't be enough.
You can use that same thread to ask people to post after dealing with you. Otherwise you can lock it and move it to Archival afterwards.
P.S.: If you want a keybase.io invite just let me know.


Title: Re: PGP key
Post by: twister on April 13, 2015, 10:15:35 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

People (myself included) normally post it on Reputation (https://bitcointalk.org/index.php?board=129.0) and ask one or 2 trusted members to quote it so if a hacker takes your account editing your post wouldn't be enough.
You can use that same thread to ask people to post after dealing with you. Otherwise you can lock it and move it to Archival afterwards.
P.S.: If you want a keybase.io invite just let me know.

I posted it here: https://bitcointalk.org/index.php?topic=996318.msg11079102#msg11079102

I saw some of the threads in the reputation board being moved for archival which is why I didn't post it there.

And I also read that it is not safe to import your private keys to keybase.io? So I don't know whether I should do it or not.


Title: Re: PGP key
Post by: EcuaMobi on April 13, 2015, 10:21:18 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

People (myself included) normally post it on Reputation (https://bitcointalk.org/index.php?board=129.0) and ask one or 2 trusted members to quote it so if a hacker takes your account editing your post wouldn't be enough.
You can use that same thread to ask people to post after dealing with you. Otherwise you can lock it and move it to Archival afterwards.
P.S.: If you want a keybase.io invite just let me know.

I posted it here: https://bitcointalk.org/index.php?topic=996318.msg11079102#msg11079102

I saw some of the threads in the reputation board being moved for archival which is why I didn't post it there.

And I also read that it is not safe to import your private keys to keybase.io? So I don't know whether I should do it or not.

As I said locked thread get moved to Archival, but I consider it's OK to have your key there in Archival. It's easy to find and doesn't bother anyone. But where you posted is fine too as long it's quoted by someone else.
Personally I have only my public key on keybase. That way anyone can encrypt messages for me or verify my signed messages. I use a local app in my computer to handle my private key to sign and decrypt.


Title: Re: PGP key
Post by: twister on April 13, 2015, 10:27:42 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

People (myself included) normally post it on Reputation (https://bitcointalk.org/index.php?board=129.0) and ask one or 2 trusted members to quote it so if a hacker takes your account editing your post wouldn't be enough.
You can use that same thread to ask people to post after dealing with you. Otherwise you can lock it and move it to Archival afterwards.
P.S.: If you want a keybase.io invite just let me know.

I posted it here: https://bitcointalk.org/index.php?topic=996318.msg11079102#msg11079102

I saw some of the threads in the reputation board being moved for archival which is why I didn't post it there.

And I also read that it is not safe to import your private keys to keybase.io? So I don't know whether I should do it or not.

As I said locked thread get moved to Archival, but I consider it's OK to have your key there in Archival. It's easy to find and doesn't bother anyone. But where you posted is fine too as long it's quoted by someone else.
Personally I have only my public key on keybase. That way anyone can encrypt messages for me or verify my signed messages. I use a local app in my computer to handle my private key to sign and decrypt.


Importing a public key for verification purposes sounds like a good idea. However, I asked someone for an invitation and then sent him another message telling I don't want it as I thought it was unsafe. (stupid me lol)

So if he doesn't reads the second message and sends me an invite than I won't need it, but if he does, then I'll ask you, would you save one for me? I would like to import my public key there.


Title: Re: PGP key
Post by: EcuaMobi on April 13, 2015, 10:37:55 PM
Importing a public key for verification purposes sounds like a good idea. However, I asked someone for an invitation and then sent him another message telling I don't want it as I thought it was unsafe. (stupid me lol)

So if he doesn't reads the second message and sends me an invite than I won't need it, but if he does, then I'll ask you, would you save one for me? I would like to import my public key there.

Sure just PM me your email if you do need it.


Title: Re: PGP key
Post by: twister on April 14, 2015, 06:22:34 AM
Thank you for the invite :)

I got my public key uploaded there. However I am having trouble with "Sign my public key to prove it's mine".

Don't know how to do that without uploading my encrypted private key. And the other instructions are, through

-> Command line
-> Command line with(Bash+GPG+curl)

And I am just lost. :-\


Title: Re: PGP key
Post by: Muhammed Zakir on April 14, 2015, 06:53:46 AM
Use Command line.


Title: Re: PGP key
Post by: twister on April 14, 2015, 07:20:15 AM
Use Command line.


Don't know how to do that. lol  

Still googling the shit out of that to see if I can find something I understand. :D

I saw someone who had his public key hosted at another site, and it has a very nice interface, where you can enter a message and check whether it was signed by him or not and write a message and click encrypt and it would encrypted by his key. Can't seem to find that.


Title: Re: PGP key
Post by: Muhammed Zakir on April 14, 2015, 07:42:45 AM
Click command line and tell me what you see. I think thry will give you an encrypted message and you will have to devrypt it and you will get instructions or they will give you a message and you will have to sign it. I can help you if you can post what is showing. Also which OS are you using?

I installed keybase-cli in my computer, so it was easy for me.


Title: Re: PGP key
Post by: twister on April 14, 2015, 07:49:37 AM
Click command line and tell me what you see. I think thry will give you an encrypted message and you will have to devrypt it and you will get instructions or they will give you a message and you will have to sign it. I can help you if you can post what is showing. Also which OS are you using?

I installed keybase-cli in my computer, so it was easy for me.

No it's not asking to decrypt or sign anything, they're only saying this:

Code:
# easy! just run this
keybase push


Title: Re: PGP key
Post by: Muhammed Zakir on April 14, 2015, 09:23:55 AM
No it's not asking to decrypt or sign anything, they're only saying this:

Code:
# easy! just run this
keybase push

"Command line" is for Keybase-cli. So I guess you will have to go for next option.


Title: Re: PGP key
Post by: twister on April 14, 2015, 12:08:00 PM
No it's not asking to decrypt or sign anything, they're only saying this:

Code:
# easy! just run this
keybase push

"Command line" is for Keybase-cli. So I guess you will have to go for next option.

The next one is the same, they're showing a script which I have to enter into a terminal and I tried but nothing happens.

I don't understand why do they make it so difficult, why can't they just ask me to decrypt a file or sign a message to prove that I own that public key.

I think they don't want users who only upload their public keys but want users to upload their private keys too, which I won't do.

Is there an alternate for it, I already uploaded my public key to MIT public server and ubuntu too, so that'll work for now, I think.


Title: Re: PGP key
Post by: EcuaMobi on April 14, 2015, 12:34:45 PM
No it's not asking to decrypt or sign anything, they're only saying this:

Code:
# easy! just run this
keybase push

"Command line" is for Keybase-cli. So I guess you will have to go for next option.

The next one is the same, they're showing a script which I have to enter into a terminal and I tried but nothing happens.

I don't understand why do they make it so difficult, why can't they just ask me to decrypt a file or sign a message to prove that I own that public key.

I think they don't want users who only upload their public keys but want users to upload their private keys too, which I won't do.

Is there an alternate for it, I already uploaded my public key to MIT public server and ubuntu too, so that'll work for now, I think.

In order for the command line to work you need to install some dependencies. As stated between parenthesis you need: Bash+GPG+curl

Do you have Linux, Windows or Mac? This is much easier to install on Linux.


Title: Re: PGP key
Post by: twister on April 14, 2015, 12:55:42 PM
No it's not asking to decrypt or sign anything, they're only saying this:

Code:
# easy! just run this
keybase push

"Command line" is for Keybase-cli. So I guess you will have to go for next option.

The next one is the same, they're showing a script which I have to enter into a terminal and I tried but nothing happens.

I don't understand why do they make it so difficult, why can't they just ask me to decrypt a file or sign a message to prove that I own that public key.

I think they don't want users who only upload their public keys but want users to upload their private keys too, which I won't do.

Is there an alternate for it, I already uploaded my public key to MIT public server and ubuntu too, so that'll work for now, I think.

In order for the command line to work you need to install some dependencies. As stated between parenthesis you need: Bash+GPG+curl

Do you have Linux, Windows or Mac? This is much easier to install on Linux.


I have Windows and Linux, No Mac.

I don't know how to do it on both though.  :(


Title: Re: PGP key
Post by: Muhammed Zakir on April 14, 2015, 05:24:09 PM
I suggest you to install Keybase-cli. It is easy to install in both windows and linux. See https://keybase.io/docs/command_line.

If you don't want to, I will try to post a detailed guide tomorrow if you couldn't do it by then.


Title: Re: PGP key
Post by: twister on April 14, 2015, 05:43:48 PM
I suggest you to install Keybase-cli. It is easy to install in both windows and linux. See https://keybase.io/docs/command_line.

If you don't want to, I will try to post a detailed guide tomorrow if you couldn't do it by then.

I'll wait for your guide.  ;D

If you know me you know that I don't like to install things unless I really have to. And if it comes to that I'll drop Keybase.io.  I can live without it. :D


Title: Re: PGP key
Post by: neurotypical on April 14, 2015, 10:50:14 PM
I still need to get my head around this. Seems like a really interesting concept, being able to sign messages and prove its you without giving any more data.
For some reason I see everyone using Linux when they post their PGP.. is there a reason? it always says "Linux" on the PGP thing.
I have a Linux machine for the safe stuff like BTC but usually I browse with a Windows machine. It would be a kind of a pain in the ass if you need to be on Linux everytime you use the PGP, since like I said before I barely use it.


Title: Re: PGP key
Post by: EcuaMobi on April 14, 2015, 10:53:30 PM
I still need to get my head around this. Seems like a really interesting concept, being able to sign messages and prove its you without giving any more data.
For some reason I see everyone using Linux when they post their PGP.. is there a reason? it always says "Linux" on the PGP thing.
I have a Linux machine for the safe stuff like BTC but usually I browse with a Windows machine. It would be a kind of a pain in the ass if you need to be on Linux everytime you use the PGP, since like I said before I barely use it.

There are several PGP tools for Windows too. When on Windows I use Cryptophane (https://code.google.com/p/cryptophane/) and it works great. For Android I use OpenKeychain (https://play.google.com/store/apps/details?id=org.sufficientlysecure.keychain&hl=es). You can use PGP on any OS really.


Title: Re: PGP key
Post by: arnux on April 14, 2015, 11:01:53 PM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

The thread you are talking about is over at meta "stake your bitcoin address"


Title: Re: PGP key
Post by: ticoti on April 15, 2015, 01:56:25 AM
I recommend you Keybase.io , I have got an invite today, and it is much more simple than using the computer programs, Actually I haven't got to sign a message with pgp with my computer but now with keybase.io I have done it really easy


Title: Re: PGP key
Post by: EcuaMobi on April 15, 2015, 02:06:41 AM
I finally made one  :). Now I don't know what should I do with it.

I saw some threads where people had their public key posted but I can't find the sub-forum for it now.

Any advices as to where should I post it?

The thread you are talking about is over at meta "stake your bitcoin address"

I recommend you Keybase.io , I have got an invite today, and it is much more simple than using the computer programs, Actually I haven't got to sign a message with pgp with my computer but now with keybase.io I have done it really easy

Both of you seriously need to start reading the thread before posting and not just the title and maybe the OP. It's not so difficult, just try the next time.


Title: Re: PGP key
Post by: Muhammed Zakir on April 15, 2015, 05:59:55 AM
I hope I am good enough to help you.

Linux only.

Installing Bash:

 • sudo apt-get install build-essential
 • wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
 • tar xf bash-4.1.tar.gz
 • ./configure
 • make
 • sudo make install

Installing cURL:

 • sudo apt-get update
 • sudo apt-get install curl

Uploading PGP public key to Keybase:

 • Select third option - "command line with [bash + GPG + cURL]".
 • Copy-paste the code in your terminal and press "Enter/Return".

Codes Commands used here:

 • sudo :- Gives superuser/root privileges when running a command.
 • apt-get install :- Does everything that is needed so that your system can successfully execute the newly installed software application.
 • apt-get update :- apt-get update downloads the package lists from the repositories and "updates" them to get information on the newest versions of packages and their dependencies.
 • wget :- Retrieves content from web servers.
 • ./configure :-  It will check if you have everything needed to build the application and if it sees any critical errors it will inform you.
make :- Compiles the source code to binaries.
make install :- Moves all the needed for application files to the appropriate system directories.

Don't thank me, thank Google and AskUbuntu. :)

P.S. Sorry if there is any typo or mistake and/or if I missed any step. If there is any experts, please take a quick-look. Thank you!


Title: Re: PGP key
Post by: twister on April 15, 2015, 06:29:09 AM
I hope I am good enough to help you.

Linux only.

Installing Bash:

 • sudo apt-get install build-essential
 • wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
 • tar xf bash-4.1.tar.gz
 • ./configure
 • make
 • sudo make install

Installing cURL:

 • sudo apt-get update
 • sudo apt-get install curl

Uploading PGP public key to Keybase:

 • Select third option - "command line with [bash + GPG + cURL]".
 • Copy-paste the code in your terminal and press "Enter/Return".

Codes Commands used here:

 • sudo :- Gives superuser/root privileges when running a command.
 • apt-get install :- Does everything that is needed so that your system can successfully execute the newly installed software application.
 • apt-get update :- apt-get update downloads the package lists from the repositories and "updates" them to get information on the newest versions of packages and their dependencies.
 • wget :- Retrieves content from web servers.
 • ./configure :-  It will check if you have everything needed to build the application and if it sees any critical errors it will inform you.
make :- Compiles the source code to binaries.
make install :- Moves all the needed for application files to the appropriate system directories.

Don't thank me, thank Google and AskUbuntu. :)

P.S. Sorry if there is any typo or mistake and/or if I missed any step. If there is any experts, please take a quick-look. Thank you!

I wish it was that easy mate. I already installed Bash and Curl yesterday and tried the 3rd method but nothing happens. I am also not on Ubuntu I use a different distro altogether and things aren't as easy in it as they're in Ubuntu.

But thanks for putting up the time and effort in finding me a solution. Really appreciate it.

I think I have to do it on windows because I am guessing the script they ask to run in the terminal is for windows. But then I have to move my PGP key there for it to work which is why I am trying to find a way to accomplish it over linux.


Title: Re: PGP key
Post by: Muhammed Zakir on April 15, 2015, 06:41:47 AM
Can you tell me what it shows and which distro you are using?


Title: Re: PGP key
Post by: Gisado on April 15, 2015, 07:05:51 AM
I hope I am good enough to help you.

Linux only.

Installing Bash:

 • sudo apt-get install build-essential
 • wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
 • tar xf bash-4.1.tar.gz
 • ./configure
 • make
 • sudo make install

Installing cURL:

 • sudo apt-get update
 • sudo apt-get install curl

Uploading PGP public key to Keybase:

 • Select third option - "command line with [bash + GPG + cURL]".
 • Copy-paste the code in your terminal and press "Enter/Return".

Codes Commands used here:

 • sudo :- Gives superuser/root privileges when running a command.
 • apt-get install :- Does everything that is needed so that your system can successfully execute the newly installed software application.
 • apt-get update :- apt-get update downloads the package lists from the repositories and "updates" them to get information on the newest versions of packages and their dependencies.
 • wget :- Retrieves content from web servers.
 • ./configure :-  It will check if you have everything needed to build the application and if it sees any critical errors it will inform you.
make :- Compiles the source code to binaries.
make install :- Moves all the needed for application files to the appropriate system directories.

Don't thank me, thank Google and AskUbuntu. :)

P.S. Sorry if there is any typo or mistake and/or if I missed any step. If there is any experts, please take a quick-look. Thank you!

Note that you need to run Debian and its derivates(for example, Ubuntu) to run apt-get. So if you are on CentOS or fedora, you need to run yum and if you are on other distro, you have to compile it yourself.

ps. apt-get update is not enough. You need to do apt-get upgrade too. (Update just fetchs the update from APT repository and upgrade installs them.)


Title: Re: PGP key
Post by: twister on April 15, 2015, 07:24:04 AM
Can you tell me what it shows and which distro you are using?

It doesn't shows anything but it does shows some script errors.

I use alphaOS but don't worry I'll figure it out, I just have to put more mind into it, which I currently feel a bit lazy to do or else I'll ask some of my linux expert pals.


Title: Re: PGP key
Post by: twister on April 15, 2015, 07:32:06 AM
PGP is like your ID

people will cross reference it to your public key and stuff like that.
Show them a signed message every time you send something to let them'
know that it's you and you sent it from that computer.

 :D Thanks for all the suggestions, Locking this down.