Client: Encrypting files for teams.

[funnylookinhat]

I'm not sure if this simply isn't documented or not supported. Given that I've created a team called "foobar", I would expect to be able to do something like the following:

keybase encrypt foobar -i myfile -o myfile.keybase

This complains about the team foobar not existing. I've also tried other obvious ideas like keybase encrypt team/foobar to no avail. Is this supported? Is there a command to do this?

[maxtaco]

good point, cc: @oconnor663

[oconnor663]

It's not yet supported. Teams were invented after the last round of changes to the saltpack format, and we haven't gone back to add support for them. But it's on the list of missing teams features, and we do plan to do it.

[brainstorm]

We would be super interested to have this feature in for our terraform/team infrastructure :)

I wonder if just wrapping the way issue https://github.com/keybase/kbfs/issues/774 encrypts data for multiple users as a shortcut for this feature would work or if it's a bit more involved?

/cc @reisingerf

[maxtaco]

Cc @amarcedone

[maxtaco]

Working on it this summer!

[scottrigby]

@maxtaco Curious where that landed?

[maxtaco]

keybase encrypt

[funnylookinhat]

Awesome!

For anyone who lands on this thread - you can specify --team now as a target:

$ keybase encrypt --help | grep "\-\-team"
  - Team encryption, available through the "--team" flag, encrypts the message
   --team [--team option --team option] Encrypt for a team. Can be specified multiple times.

[scottrigby]

Ah, this has been done since last July 😻 💯 https://github.com/keybase/client/pull/12724

[Engelberg]

To decrypt a message encrypted for a team, do you have to specify the team name to the decrypt command, or does keybase automatically know that you are a member of the team in question?

[AMarcedone]

No need to specify the team to decrypt.