Why Is Establishing Online Identity So Difficult?

TL;DR

Establishing a secure online identity is challenging due to the current reliance on servers that store sensitive data, making them vulnerable to breaches. Keybase addresses this issue by using public key cryptography, which ensures that even if their system is hacked, encrypted data remains secure and unreadable without the user's private key. The approach focuses on making cryptography accessible and usable for everyone.

Transcript

welcome to the a 16z podcast I'm Michael Copeland as more and more of what we do for fun and work happens online establishing identity becomes ever more critical whether it's for dating or sending money you want to trust that not only are you interacting with the person you think you are but that your messages or money are in fact reaching the righ... Read More

Key Insights

• 😖 Keybase is founded by the co-founders of OkCupid and SparkNotes, who bring their experience in user recruitment and product design to make public key cryptography more user-friendly.
• 🤩 Traditional approaches to cryptography, such as key signing parties, are impractical and inaccessible to most users. Keybase seeks to overcome these limitations and make cryptographic technology more widely usable.
• 🏪 The current system of online security, with servers storing sensitive data, is vulnerable to breaches. Keybase's infrastructure ensures that even if their system is compromised, the encrypted data remains secure and useless to hackers.
• ✊ Usability is a crucial aspect of adopting secure technologies, and Keybase aims to simplify the process by leveraging the power of modern devices and eliminating the need for complex passwords.
• 🤗 Keybase plans to release their applications as open source to foster transparency and allow others to build on their technology, benefiting from the work they have done in cryptographic plumbing.
• 👤 Initially targeting programmers and security professionals, Keybase plans to expand their user base to tens or hundreds of millions of users who understand the importance of encryption but lack the technical knowledge to implement it.

Questions & Answers

Q: How did the co-founders' previous experience with OkCupid and SparkNotes prepare them for the challenges of building Keybase?

The co-founders' experience with OkCupid and SparkNotes gave them insights into user recruitment, onboarding, and building products that people initially think may not be right for them. This experience is crucial in making public key cryptography popular and trusted.

Q: What are the two fundamental things that can be done with cryptographic technology?

Firstly, cryptography allows for secure communication by encrypting messages, ensuring that only the intended recipient can read them. Secondly, cryptography can be used to establish and verify digital identities, preventing impersonation and identity theft.

Q: What are the limitations of traditional password-based security systems?

Traditional password-based systems can be cumbersome, difficult to remember, and prone to hacking. Keybase aims to eliminate the need for passwords by using public key cryptography, where users sign statements with their private key to prove their identity.

Q: How does Keybase plan to balance usability and security?

Keybase aims to make cryptographic tools more user-friendly by leveraging the power of modern devices, such as using fingerprint authentication for password management. They also intend to eliminate the need for passwords altogether by implementing a system where users sign statements to authenticate their identity.

Summary & Key Takeaways

• Keybase was founded by the co-founders of OkCupid and SparkNotes, Chris Dixon and Max Krohn, with the goal of creating a system for mapping digital identity that combines security and social networking aspects.

• The traditional approach to cryptography has relied on exchanging keys through physical meetings or key signing parties. Keybase aims to make public key cryptography more accessible and usable for a wider audience.

• The current system of online security, with servers holding sensitive data, is prone to breaches. Keybase's architecture ensures that even if their system is hacked, the encrypted data remains secure and unreadable without the private key.