4 ms·

Yeah, I can use PGP to encrypt e-mail, with all the problems that come with it. However... I don't need a signature from governikus to do this.

• Zemtomo 3y ago
  It becomes an official communication method. This should allow you to actually send legal save communication to the government.
  • germanier 3y ago
    There is no special legal status attached to that. Actual electronic signatures recognized by law are not based on GPG.
    • Zemtomo 3y ago
      Isn't that a page from Germany? Using your eID? Do you know this or do you assume this?
      • germanier 3y ago
        Yes, my statements are about the legal reality I Germany. GPG signatures convey no special legal status above regular email even if the key is signed by a government-owned company that verified your eID.
        • Zemtomo 3y ago
          I read it differently. But let's see how it is currently reading this can become the defacto standard. And technically it's a good workflow/choice
          • germanier 3y ago
            That service is not new. And nobody seriously considers adopting GPG for that, as it's has serious design flaws.
            • Zemtomo 3y ago
              What design flaw?
              • germanier 3y ago
                My mother would not be able to keep her private key secure.
                • Zemtomo 3y ago
                  But that's not the point. This would even allow companies to offer this for you because the only interface necessary is the key
• madsr 3y ago
  If your PGP key isn't signed by anyone, then there's no way to verify that it's really you - other than contacting you and checking the fingerprint. By having a trusted third party such as Governikus sign it, anyone can verify instantly that _this_ PGP key is actually from a person with a _name_ for which they also have a government ID with that exact name. I can envision a _lot_ of use cases for having your name publicly recognized by a trusted party.