Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Safer account recovery mechanism that does not force users to trust server #4
Picking up from the mailing list convo, as requested, I'm opening up this issue to start a discussion about how users can safely recover their accounts without giving the CONIKS server the ability to take control of their account.
The basic mechanism that's being suggested is simply the idea of giving users say over whom they trust to re-create their identity for them. I copy/paste that idea here: