Follow

Someone at the keysigning party later said: "I didn't get a signed key from you yet.. I'm not signing your key until you sign mine, because I've been burnt before". LOL. Tempting to reply & say "who's to say I can trust you to follow through? Maybe we should meet again and do an in-person exchange of signatures with impartial witnesses present."

I suppose we could expand the process, so everyone sends the signed keys to a trusted intermediary, who then witholds sigs that would go to someone who didn't do their homework.

Show thread

@resist1984 know that problem and it is not the only one. people have a different way to handle trust...

Never knew key signing was a quid pro quo thing, I always thought it was about trust and validation.
Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!