On: Keybase's new Proof Integration Guide

[munchbunny]

Does that mean you go through an extra authentication flow to enroll the new device? Otherwise it's not 2FA, it's just telling you after the fact that someone got into your account.

[rodonn → munchbunny]

Yes you have to authenticate any new devices from one of your existing devices.

[gluecode → rodonn]

Last week, I logged into Keybase from a brand new iPad without any authentication challenge from a trusted device. As far as I can tell, there is no second factor.

[zaarn → gluecode]

If you log into the website, there is no second factor. If you already trusted a device, there isn't a seecond factor either.

[DuskStar → gluecode]

Did you use a paper key?

[gluecode → DuskStar]

Just used username and password.

[DuskStar → gluecode]

That's weird. Almost all the nodes on your graph are signed by your PGP key 'F155E778FA657400' or the paper key 'above sleep'. The rest were signed by other devices, or were the original node...

https://keybase.io/gluecode/graph

[seppin → gluecode]

I did the same thing via browser on a new laptop. Just l/p