Your key
Make a key pair in this browser, protected by a passkey. The private half never leaves the browser; only the public half goes on the site. With it you can message the lead from the dashboard, signed as you. Built for Dinis (brief 4); anyone else can make a key, but only a key listed in data/person-keys.json by a commit means a person's word.
1. Make it
2. Put the public half on the site
Fingerprints:
Protection:
Copy this entry into data/person-keys.json (the keys list) by a commit, or hand it to the lead. It is the public half only.
3. A backup (optional, recommended)
If you clear this browser's data or lose the passkey, the key is gone. A backup is the private halves encrypted under a passphrase you choose, in the sgit format; keep the file private.
How: keys.js from pki.sgit.ai (RSA-OAEP 4096 to seal, ECDSA P-256 to sign, sgit hybrid v2 envelopes); the private halves are AES-256-GCM encrypted in IndexedDB, wrapped by the passkey's PRF secret where it has one.