Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Moxie and I have a close professional relationship but I'm not sure what bearing that has on asking for the code of Keybase's server to be open-sourced.

You have a professional relationship with the founder of one of their competitors. It's appropriate in those cases to note that you have a bias. I realize you don't think you have a bias, but that's the whole point.

> If you want trust, you have to be open source.

That's such a confusing statement, and a particularly misleading one coming from someone that works for a crpyto company.

The whole point of end to end crypto is that you don't need to trust the server.

> I honestly have no idea why this is even controversial :/.

That's the core of the problem. You have a professional relationship with the founder of Signal. If you comment on a thread about Signal, or it's competitors, we shouldn't have to click the link to your site to find that out.

Think of it as building trust...



I see. I will include that disclaimer in all threads I comment on about Signal in the future. Thanks for explaining this to me.

I've been a fan of Signal since it was RedPhone and TextSecure and my professional relationship with Moxie is quite recent in the scheme of watching the rise of his projects. I apologize if my lack of awareness was offensive, it was unintended.

Edit: Just to be clear, I don't think you need to have the server open-sourced to trust the end to end encryption of the messages, but that's just one part of the overall trust model.


I don't think any kind of disclaimer was necessary. Your point about the Keybase server being closed-source has nothing to do with Signal and is completely valid no matter what competing interests you may have.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: