I think GPG is an amazing, well-designed, resilient, widely-adopted, well-tooled, time-tested, mathematically-proven technology and standard. I think the only

I think GPG is an amazing, well-designed, resilient, widely-adopted, well-tooled, time-tested, mathematically-proven technology and standard. I think the only thing missing is a tolerable user interface that allows one-click key generation, one-click signing, and zero-click validation and verification. I think that the biggest oversight in using it today is our attachment to our "main" or "primary" key and trying to hold on to it, keep it safe, and if we use multiple keys, trying to keep it all in the same "tree" or keyring. We could be using it on every website and platform, and instead of creating an identity on the server, storing our identity locally, either on the filesystem, in LocalStorage, or some other way. In fact, that's exactly the model I'm using in my web-based forum system. "Registering" an account is just generating a key, and posting something "with my identity" is just signing it with PGP. In fact, I don't have a single feature which uses encryption yet. Only signing. Encryption is a bit of a red herring with PGP, I think verifiable signing and tooling for almost every platform and language in existence are its two real killer features. Without nation-state backing, I wouldn't trust it to keep something secure or private. On the other hand, its portability, adaptability, and compatibility is unmatched by any tool that I'm aware of. It allows you to have a portable identity that you can own and secure, and do it all in plaintext. And the content, identities, votes of my forum can be migrated, cloned, copied, synchronized among any other forum like it, or used outside of it with the most popular identity tooling in existence at your disposal. Just download a zip of text files and you're good to go!