3 ms·

4. DNS (sort of a walled garden, yes) 5. Adding a fingerprint to all e-mails you send out (people online you never met/meet only know you by your online behavi

by megous 7y ago

4. DNS (sort of a walled garden, yes) 5. Adding a fingerprint to all e-mails you send out (people online you never met/meet only know you by your online behavior anyway) so cross-checking a few mailing list archives the user posted to in the last few years should be enough. This is most useful if you are subscribed and can be thus sure that the archive was not manipulated.

Boulth 7y ago
> 4. DNS (sort of a walled garden, yes) IMHO, Web Key Directory is a better option here. It has all benefits of DNS but none of the drawbacks (DNS has plain text queries etc.)
- megous 7y ago
  Very nice. Both DNS and WKD are real-time, and modifiable by an attacker. There's no trail of trust/history. It may be good for discovery, but trusting the key requires more. I guess that it's better to have multiple independent ways to validate ownership of a key after you discover it. Cross-check various methods that require different levels of access, to see if something is fishy. Anyway, I'm off to implement wkd. :)