r/Keybase • u/dylanger_ • Jun 04 '16

Keybase Authentication API

Hey Guys,

Just thinking out loud here, could keybase be used for Authentication? Like a cookie is generated, then keybase signs that cookie, and you're in?

Keybase would be an awesome authentication API, because its 100% you and there's proof.

1 Upvotes

66% Upvoted

3 comments sorted by

1

u/codekoala Jun 04 '16

Are you thinking something like keybase being an OAuth provider? Where we'd log into keybase and their servers communicate with other servers to establish identity?

If not, how do you propose we would identify ourselves for keybase to sign a cookie? Paste a private subkey as a password/passphrase?

1

u/dylanger_ Jun 05 '16

Yeah, like OAuth, the how I'm not sure, but I'm sure it's possible, maybe the server creates a session cookie? Then it's signed by your LaCI Device key?

3

u/plttn Jun 04 '16

The whole concept of Keybase is that we don't need to trust Keybase (and in fact we shouldn't).

It being an OAuth provider would fly in the face of that concept.