3 ms·
How do you verify the PGP key for a random LEO? The web of trust is a total failure for general use verification, it only solves the special ultra-paranoid use
by jandrese 5y ago
How do you verify the PGP key for a random LEO? The web of trust is a total failure for general use verification, it only solves the special ultra-paranoid use case.
Key distribution has always been the weak point of PGP.
- ryukafalz 5y agoYou would use something like WKD and not the web of trust. https://wiki.gnupg.org/WKD https://wiki.gnupg.org/WKD
- est31 5y agoGovernment institutions are some of the best places where centralized certificate handling/signing infrastructures shine.
- jandrese 5y agoAnd yet it's basically impossible to get a government organization to sign emails except internally using MS Exchange's encrypted email support.
- EricE 5y agoDHS already has a portal LEOs use to collaborate - would be pretty easy to set up something at the federal level - if there was the will.