4 ms·

I don't see how this is any better than a keyserver and just asking confirming their GPG fingerprint by some other means. Not knowing someone and guessing that

I don't see how this is any better than a keyserver and just asking confirming their GPG fingerprint by some other means. Not knowing someone and guessing that their fingerprint is right from some third party is very sketchy because it doesn't use a trustworthy, authoritative source (the other person). Also, WoT works best when people meet other people they trust in person and sign each other's keys as the GNU/Linux community encourages. https://www.kernel.org/signature.html https://www.kernel.org/signature.html Then it's possible to get other people's keys elsewhere on the planet and know they're probably good given they're signed by someone you trust.

fiatjaf 13y ago
What the GNU/Linux community encourages is clearly not being useful for making lots of people use PGP.
- midas007 13y ago
  Then let's make apps that explain i) how it works with pictures and ii) exchange keys more easily: say share key ids with barcodes. GPG mail plugins that popup a barcode that someone else can scan with their laptop's webcam or some mobile app. GPG mail plugins should also have a search toolbar that can quickly get a key so it can be verified. Mobile platforms must support GPG natively, many only support S/MIME.