5 ms·
Perhaps I don't understand the whole keyserver concept... But how is a keyserver not a centralised "IdP" like construct?
by bulte-rs 13y ago
Perhaps I don't understand the whole keyserver concept... But how is a keyserver not a centralised "IdP" like construct?
- kyrias 13y agoPGP keyservers talk to each other, if you send your key to GnuPG keyserver it'll end up on MIT's keyserver pretty soon.
- midas007 13y agoThanks. The WoT depends on not trusting the keyservers, but trusting that humans on the other end know whom to trust and get them to countersign each other's keys. SSL CAs:GnuPG (GPG/PGP) -> Subversion:Git