5 ms·

The page describes it in the middle by describing how you can encrypt your email and use that connected mail box with it.

hannob 3y ago
Yeah, I can use PGP to encrypt e-mail, with all the problems that come with it. However... I don't need a signature from governikus to do this.
- Zemtomo 3y ago
  It becomes an official communication method. This should allow you to actually send legal save communication to the government.
  - germanier 3y ago
    There is no special legal status attached to that. Actual electronic signatures recognized by law are not based on GPG.
    - Zemtomo 3y ago
      Isn't that a page from Germany? Using your eID? Do you know this or do you assume this?
      - germanier 3y ago
        Yes, my statements are about the legal reality I Germany. GPG signatures convey no special legal status above regular email even if the key is signed by a government-owned company that verified your eID.
        Zemtomo 3y ago
        I read it differently. But let's see how it is currently reading this can become the defacto standard. And technically it's a good workflow/choice
        germanier 3y ago
        That service is not new. And nobody seriously considers adopting GPG for that, as it's has serious design flaws.
        Zemtomo 3y ago
        What design flaw?
        germanier 3y ago
        My mother would not be able to keep her private key secure.
        Zemtomo 3y ago
        But that's not the point. This would even allow companies to offer this for you because the only interface necessary is the key
- madsr 3y ago
  If your PGP key isn't signed by anyone, then there's no way to verify that it's really you - other than contacting you and checking the fingerprint. By having a trusted third party such as Governikus sign it, anyone can verify instantly that _this_ PGP key is actually from a person with a _name_ for which they also have a government ID with that exact name. I can envision a _lot_ of use cases for having your name publicly recognized by a trusted party.

hannob 3y ago

Yeah, I can use PGP to encrypt e-mail, with all the problems that come with it. However... I don't need a signature from governikus to do this.

Zemtomo 3y ago
It becomes an official communication method. This should allow you to actually send legal save communication to the government.
- germanier 3y ago
  There is no special legal status attached to that. Actual electronic signatures recognized by law are not based on GPG.
  - Zemtomo 3y ago
    Isn't that a page from Germany? Using your eID? Do you know this or do you assume this?
    - germanier 3y ago
      Yes, my statements are about the legal reality I Germany. GPG signatures convey no special legal status above regular email even if the key is signed by a government-owned company that verified your eID.
      - Zemtomo 3y ago
        I read it differently. But let's see how it is currently reading this can become the defacto standard. And technically it's a good workflow/choice
        germanier 3y ago
        That service is not new. And nobody seriously considers adopting GPG for that, as it's has serious design flaws.
        Zemtomo 3y ago
        What design flaw?
        germanier 3y ago
        My mother would not be able to keep her private key secure.
        Zemtomo 3y ago
        But that's not the point. This would even allow companies to offer this for you because the only interface necessary is the key
madsr 3y ago
If your PGP key isn't signed by anyone, then there's no way to verify that it's really you - other than contacting you and checking the fingerprint. By having a trusted third party such as Governikus sign it, anyone can verify instantly that _this_ PGP key is actually from a person with a _name_ for which they also have a government ID with that exact name. I can envision a _lot_ of use cases for having your name publicly recognized by a trusted party.