Keybase Browser Extension May Expose Communications

The browser extension for Keybase, a communication and collaboration platform whose function is securing traffic between the source and destination via public-key cryptography, contains a flaw that leaves Keybase Chat messages unencrypted from the extension to their local copy of Keybase, possibly allowing sites to view these messages. The flaw was discovered by Wladimir Palant, maker of the AdBlock Plus tool. The NJCCIC recommends Keybase users review Palant's article and discontinue use of the extension, particularly if it is used for sensitive communications.