> You do. (Or in reality, the whole world since the point of Mega is to share files.) That implication makes no sense to me. Why would you ever share a private

> You do. (Or in reality, the whole world since the point of Mega is to share files.) That implication makes no sense to me. Why would you ever share a private key? The trust question is more about public keys. Do you trust that the key you think is your friends public key really is? And that's what key-signings are for. The screenshot shows in-browser key generation but there's no reason I can think of that they should not accept keys generated by GPG or similar. Generate your keypair as securely as you can and however you like--and then only submit your public key to the Mega site.