5 ms·
Can you elaborate as to how identity is established? Also, how is this different from public key servers + revoke certificates? Interesting post, thanks!
by asimpletune 8y ago
Can you elaborate as to how identity is established?
Also, how is this different from public key servers + revoke certificates?
Interesting post, thanks!
- epoch_100 8y agoIdentity is established by the authority key. Let's say your workplace publishes a keylist that contains the PGP keys of all of your colleagues. Because each key on the keylist has been vetted by your organization to belong to its stated owner, you can trust it. This is different from public key servers and revoke certificates because Keylists allow organizations to push new keys to all of their users—keys that the users might not have had before. Keyservers only provide a mechanism for retrieving keys you already know you want. This is explained in detail in the post, if you're curious for more information.