Krohn: Cryptographic public key signing is far superior to password authentication
Max Krohn · a16z Podcast | Establishing Online Identity is Hard -- It Shouldn't Be · Jan 2, 2019 · at 14:26
Max Krohn, co-founder of Keybase, explains cryptographic authentication mechanisms on the a16z Podcast with Chris Dixon.
0:00 / 0:20exact quote · 20.6s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“What you ought to be doing is signing a statement saying, I'm Max, and I want to log into this service, and the service would just have your public key. You know, Max is identified with this public credential, and as long as he's able to sign a statement with the corresponding private key, I'll let him into the service. And so that's actually a far superior way to log into a system.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Max Krohn
Krohn: Perimeter security for major cloud providers is an impossible task
“It's just that they've chosen to do a job that's basically impossible, that, that no one can really do. Relative to all the threats that are lined up against them.”
Krohn: Security software cannot be trusted unless the code is open source
“Because we're building software that we think people need to trust, there's no possible way that people can trust us unless they get to see what the code actually is and how the software we're writing is using crypto and is using The various things that we tal…”
Krohn: People will increasingly need digital identity mapping
“We started Keybase a little bit over a year ago just because we were convinced that in the future people would really see a need for mapping what they considered notions of identity that computers could understand.”
Krohn: Consumer crypto onboarding shares challenges with early online dating platforms
“So in that respect, we think that our experience at OkCupid is very helpful for moving into something like getting crypto to be popular for more people. There's a lot of common elements of user recruitment and user onboarding and making people like the product…”
Krohn: Systems should prevent servers from viewing plain-text user data
“The way we should be building systems is that If the server doesn't need to see the data or access the data that you're putting onto it, then it just shouldn't. There's no reason why it has to see it, then the data should be not available to the server in plai…”
Krohn: Keybase servers store no user decryption keys
“If anyone ever breaks into the server, all they really get is a bunch of encryption, and Unlike with other systems, the key you need to decrypt the data is just not on the server. The only person who has a key is like, is the phone in your pocket or the deskto…”