3 ms·
PGP keyservers don't support the web of trust any more either.
by SAI_Peregrinus 6y ago
PGP keyservers don't support the web of trust any more either.
- pabs3 6y agoThere are some ideas for restoring support for the web of trust, not sure if they got implemented yet though: https://tools.ietf.org/html/draft-dkg-openpgp-abuse-resistant-keystore-03#section-10 https://tools.ietf.org/html/draft-dkg-openpgp-abuse-resistan... https://gitlab.com/dkg/draft-openpgp-abuse-resistant-keystore/ https://gitlab.com/dkg/draft-openpgp-abuse-resistant-keystor... https://lwn.net/Articles/792674/ https://lwn.net/Articles/792674/
- Foxboron 6y agoWhich is why most distributions and other projects has moved to WKDs for key discovery. I don't think this is a good argument though as there are alternatives, even though they don't work super well at the moment.
- Leace 6y ago> Which is why most distributions and other projects has moved to WKDs for key discovery. Yeah, WKD is a first-class citizen in GnuPG. Creating signatures with "--sender $EMAIL" embeds e-mail in the signature and then gpg --auto-key-retrieve --verify will fetch the key via WKD without the need to touch keyservers.