4 ms·
The point of SKS is signing keys each other's keys and being distributed. This just fragments into a SPoF service without making the existing ones better.
by midas007 13y ago
The point of SKS is signing keys each other's keys and being distributed. This just fragments into a SPoF service without making the existing ones better.
- bulte-rs 13y agoPerhaps I don't understand the whole keyserver concept... But how is a keyserver not a centralised "IdP" like construct?
- kyrias 13y agoPGP keyservers talk to each other, if you send your key to GnuPG keyserver it'll end up on MIT's keyserver pretty soon.
- midas007 13y agoThanks. The WoT depends on not trusting the keyservers, but trusting that humans on the other end know whom to trust and get them to countersign each other's keys. SSL CAs:GnuPG (GPG/PGP) -> Subversion:Git