3 ms·
> "Login with PGP" was a thing and use a subkey for each website How well would such sites handle PGP subkey revocation? What about PGP key revocation? Revoca
by ElectricalUnion 3y ago
> "Login with PGP" was a thing and use a subkey for each website
How well would such sites handle PGP subkey revocation? What about PGP key revocation?
Revocation is very important if your key is compromised.
I haven't seen any really maintained pgp keyserver or service in general that didn't directly or indirectly (by user/agent mistake) fail spectacularly since https://evil32.com/ https://evil32.com/ was released and contaminated the 32bit key id space.