Aragon Cooperative Membership Thread

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I’m @maxsemenchuk and am validating myself on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto

wsFcBAABCgAGBQJcQaylAAoJEDPGfHVk/RO/cxUQAKGj4waSPFKq04ou483QDuK4
T7kulZHxnGtjIVcXltwPqGCLFVwWpcyeOCQoOUV56uiFwFFfRV9HPeMkmU3DiGTF
yLnAUvNjDWNDETRZ4SRicJ3FpUX4exmjiPULhZv92mKtcxjxbMMdBfWePIvSxcKE
IoMGHMSjdtc0/Yj2DaNbxwBFQqsdQx2NJEC+a6dX6JC6BLQcEc2sO/+LEKE0npBD
hm3NW1Ir+e0MILoq59xiMxPQ7lld0e0UWXt7SRS8kIFIFa3kG72GFAGU//voeam6
KSG+mjxADpuY7MNR3W+yinj13dJHj0hKP5woRv23VGaKQW8mAS0T53GbUBeNaN9i
qdgrGEsDqYyQ64Eu0Hpvs6JsvbRdfseVNITecg4l13HfthqK7ajtpm8PoBfVh2aA
MjqoIQ17124pHkWSMoH/vuwKLUMPRu1ZIL4Ceqa/Ij/3ZsLtBlecYmU9UFq5wgp4
00yQ9xzFJuJUv6gYunEwdDviA0mrIosyjcR2dF7lTobvrrs5Y3X6VA9nX1YQszkR
/YvNEHPJL5FAtgARHC9RTyc360W2raRD7IlbW+FbmF6nsUkY1Ovx4VF/OX15LDRh
cN6dW/U22yYwGo/SqPB19rcxYAdhPR3aPLPJVGBn31XKf875a2TpOxbvoEeGbzrM
6mNCWVN3OH24+sSno5yw
=t8ps
-----END PGP SIGNATURE-----

A note about the verification message format, to establish a strong two-way link between Keybase and the social media account you want the signed message to also have the account handle in it. So instead of a message like:

I’m @johnlight and am validating myself on forum.aragon.org

You would write something like:

I’m @johnlight on Keybase and am validating myself as @light on forum.aragon.org

Then by posting that signed message from the forum account in this thread, you can conclusively prove the two accounts are linked by showing at that 1. you know the credentials to the forum account referenced in the message (since you are posting from that account) and 2. you know the private key of the Keybase account referenced in the message (since the message is signed with it).

3 Likes

Great point, that does add additional guarantees, I’ve updated the OP to reflect this!

1 Like
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I’m ottog on keybase and am validating myself as ottodevs on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto

wsFcBAABCgAGBQJcQr4GAAoJEBgPWCnK72mruYcQAIBYfVpUQ7gny0rDUjSiC3hh
I6Wu6xCP0pUWP9SPSn83pItF3VWMg/6XtLOo14YJjjbWHrWNd/yBSgC6f6Niin2y
gILivbGW0KvAgu4VRWWxRA7ofQ8AvHDZxUjZ+6IPkB277tCpwcItyEd7wDqEMYk5
eERFqP1CH9dwZU3KXo7rfZYCtw/VcYpWgfjqLe9ohfyhZlYNxfwbJGNBJmkYNaQH
6bsJB9jPWvTuuSPLp40potSit3svEx6MtaE5pYuADOw4ocWdzzE6wuEyOBh4qOhX
a0qIAII8TyEosBpTwdDtCteouyd5h88g1VLAOYlof+oltOXT9bTLP7kmDzNCtx7X
w+w0tHMZTX4ac9TUhiZJ1eDYwf99T8EFGqExQhIeXCdvgDx7Cq59XW9bxHv1IyP2
prkAmdoEFVzmcNW604weyiJ06DvuCoJHULNZ30b6klrdm23ki1nNJTs3toFQd4YH
s5Ek15KLyt44BVYI0FYTPTddf0Xwmb5aj9zZh2BFC3Qv9HxWos4WQZrQZLiJdGPM
sq/kLENOKH2amcFQ+CIbk8RwF16QLqCe3ym5poiuaT747Op2O2f6arrepqoNJ/0i
nndKTUrCCyQ9UA81vgOi4KAGzfaQ1l8Ia54Q6Iwf+Cf/unBgAYByQFXHs3Elr0A5
7pWU35yqyxgmEwUmyucs
=Lmcm
-----END PGP SIGNATURE-----

Link to the aragon.chat proof

Apparently my @griffgreen keybase account somehow got added to the coop, but i was never able to find a way to access that account :stuck_out_tongue: So I hope you can add my @giveth keybase account which is what i use for Aragon Keybase!


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I’m @giveth on keybase and am validating myself as @griffgreen on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto
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=Zzdl
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I’m @jjperezaguinaga on Keybase and am validating myself as @jjperezaguinaga on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJcQrS8AAoJEEcNV2F2U20cG0cH/1P1XGJgLR65fRYVzrmKBMpZ
0iN0Rf56yf4AmiPu9jxhmCTfXMZgCBixZniwuX1RXY+JGuCD+VREiGWX+UF47CQY
SdaK2IPkaJRmV31LqVzMP4dCGqSnkPY+iMwVXHXNNVHLO+E4uLRTik2f2WCDzsTM
YMgUkfrWkdvWJh0qx4yQEG+y/LiQcdgXKPvLw/emXdvdRWvWcC5ZOT2tOOHsaHEr
EN8UQY10f413g5pPkEjKSwgLI2zlbzNNda6eVGDN/YsLgwC/yTI2E6dUqU6xI7w6
tDOks6Nt/CMWdZSjBctqvgTkD2Qi3bGIhKEx9kNvinQRIyuIYqcEffOqXFG9FWY=
=JM/+
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I’m rperez89 on keybase and am validating myself as rperez89 on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto
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=3WWU
-----END PGP SIGNATURE-----

link to aragon.chat proof

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I'm @imestin on keybase and am validating myself as @imestin on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
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=6ga3
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I'm @kevbot on Keybase and am validating myself as @topocount on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
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=7vAB
-----END PGP SIGNATURE-----

Admin Edit: had to fix formatting so this would verify.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello, I’m @rkzel on Keybase, @rkzel on aragon.chat, @rkzel on forum.aragon.org too. Beep-beep.
-----BEGIN PGP SIGNATURE-----
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=Oqc/
-----END PGP SIGNATURE-----

aragon.chat proof

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I'm @julian_brooks on Keybase and am validating myself as @julian on forum.aragon.org and @julian on aragon.chat
-----BEGIN PGP SIGNATURE-----
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=PdZm
-----END PGP SIGNATURE-----

chat link

I'm @ji on Keybase and am validating myself as @jorge on forum.aragon.org and @jorge on aragon.chat
-----BEGIN PGP MESSAGE-----
Comment: https://keybase.io/download
Version: Keybase Go 2.13.1 (darwin)
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=
=F5Ov
-----END PGP MESSAGE-----

Couldn’t get Keybase to generate a signature with the same format, hoping it works!

It does! I expect you were using the keybase console and not keybase.io/sign – Doesn’t make a difference from a verification perspective, but it might mess up @jjperezaguinaga crawler.

1 Like

So funny enough, https://keybase.io/sign can verify @ji signature, but my npm package the crawler is based isn’t at the moment. I think it’s related with the fact that @ji has two public keys (https://keybase.io/ji/pgp_keys.asc, cause of course he does :grinning:). Leave it as it is right now, will be a fun issue to solve and I’m sure won’t be the last one using the cli.

Hm, sorry, I don’t get it. Why does actually the message matter? Precisely because “you are posting from that account”, the Aragon forum identity is known, and when you do keybase pgp verify with that message, you can get the Keybase identity. So both can be linked independently from the message.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I'm @schmidsi on Keybase and am validating myself as @schmidsi on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
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=OXxC
-----END PGP SIGNATURE-----

Btw: I had to use the following command on the commandline to produce the result above:

keybase pgp sign -c -m "I'm @schmidsi on Keybase and am validating myself as @schmidsi on forum.aragon.org"

I can create an Aragon forum account “bingeneguzkitza”, copy your signed message that simply says “I’m @bingen on keybase and am validating myself on forum.aragon.org”, then post the message in this thread and we wouldn’t actually be able to conclusively verify anything from the message without verifying out of band which forum account is the “real” bingen. By putting your keybase and forum name in the signed message you leave no doubt as to which keybase account is associated to the forum account and vice versa.

1 Like

The original intent was that the user name referenced was the user name on the service, so I think what Bingen is saying is valid. But changing it so it includes both makes it much more explicit and prevents people from misreading the instructions and including just their keybase username.

The original instructions said to put this in the signed message:

“I’m [Keybase username] and am validating myself on [Service]”

1 Like

I just had to check the revision history to be sure, looks like I screwed up in the original!