3 ms·
This could be an attempt to correlate gpg keys to facebook accounts. Also, make sure you're verifying the key out of band after you've pulled it from facebook.
by kpcyrd 11y ago
This could be an attempt to correlate gpg keys to facebook accounts. Also, make sure you're verifying the key out of band after you've pulled it from facebook. /paranoia
- mirimir 11y agoEach pseudonym needs its own GnuPG key. And there can't be any overlap in usage, signatures, etc. Just sayin'.
- Sami_Lehtinen 11y agoSo what, gpg keys are unlimited resource. Just generate new ones whenever required. I've been using that strategy. Just like you don't want to reuse your password everywhere. If you don't want to be anonymous anymore, you can sign nonce with your official and with your temporary key. Some seem to claim that OpenPGP doesn't support ephemeral keys, but it does. You just need to generate new keys and use those, when ever you want/need to.