{"action":"created","issue":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/220","repository_url":"https://api.github.com/repos/sandstorm-io/sandstorm","labels_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/220/labels{/name}","comments_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/220/comments","events_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/220/events","html_url":"https://github.com/sandstorm-io/sandstorm/issues/220","id":55691600,"number":220,"title":"Implement decentralized GPG login","user":{"login":"paulproteus","id":25457,"avatar_url":"https://avatars.githubusercontent.com/u/25457?v=3","gravatar_id":"","url":"https://api.github.com/users/paulproteus","html_url":"https://github.com/paulproteus","followers_url":"https://api.github.com/users/paulproteus/followers","following_url":"https://api.github.com/users/paulproteus/following{/other_user}","gists_url":"https://api.github.com/users/paulproteus/gists{/gist_id}","starred_url":"https://api.github.com/users/paulproteus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paulproteus/subscriptions","organizations_url":"https://api.github.com/users/paulproteus/orgs","repos_url":"https://api.github.com/users/paulproteus/repos","events_url":"https://api.github.com/users/paulproteus/events{/privacy}","received_events_url":"https://api.github.com/users/paulproteus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-01-27T23:32:49Z","updated_at":"2016-04-29T06:56:27Z","closed_at":null,"body":"Right now, self-hosters must choose between Google auth and GitHub auth. This is sub-optimal for people who would prefer to be entirely self-reliant.\r\n\r\nThis issue tracks work required to deliver the first version of GPG login so that this is a serious option."},"comment":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/comments/215641584","html_url":"https://github.com/sandstorm-io/sandstorm/issues/220#issuecomment-215641584","issue_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/220","id":215641584,"user":{"login":"kentonv","id":4001805,"avatar_url":"https://avatars.githubusercontent.com/u/4001805?v=3","gravatar_id":"","url":"https://api.github.com/users/kentonv","html_url":"https://github.com/kentonv","followers_url":"https://api.github.com/users/kentonv/followers","following_url":"https://api.github.com/users/kentonv/following{/other_user}","gists_url":"https://api.github.com/users/kentonv/gists{/gist_id}","starred_url":"https://api.github.com/users/kentonv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kentonv/subscriptions","organizations_url":"https://api.github.com/users/kentonv/orgs","repos_url":"https://api.github.com/users/kentonv/repos","events_url":"https://api.github.com/users/kentonv/events{/privacy}","received_events_url":"https://api.github.com/users/kentonv/received_events","type":"User","site_admin":false},"created_at":"2016-04-29T06:56:27Z","updated_at":"2016-04-29T06:56:27Z","body":"@zenhack Relevant: https://sandstorm.io/news/2015-05-01-is-that-ascii-or-protobuf\r\n\r\nThough probably the answer to that problem here is to say: \"You need to use a signing key that you only use for signing natural language text.\"\r\n\r\nAnother thing to consider: If we used decryption rather than signing, then we could actually store a symmetric key encrypted to your public key, and encrypt all your data on the server with that symmetric key, such that there's no way for Sandstorm to access your data at rest (only when you log in). However, there is a risk that users will unwittingly turn into a decryption oracle for their Sandstorm server.\r\n\r\nOtherwise, yes, that's more or less what I'd like to implement. But no, there is no work happening on this currently -- too much other stuff to do. If you'd like to work on it, that'd be cool!"}}