@vlpatton The classic method is a key signing party. Get a bunch of people in the same room with legal photo identification and their fingerprints, and go around the room checking everyone else’s ID. Then, go home and sign everyone’s keys. Send the signed key to the key owner. Import signed keys and collect signatures!

Key servers sharing signatures haven’t been a thing since the attacks years ago. Any modern keyserver will strip the signatures, so you’ll have to distribute your key with signatures some other way (WKD, DNS, a file on your web site, etc.).

CAcert will do PGP key endorsements if you get enough assurances on their platform. Everyone with a signed key has had two forms of ID checked by two people. However, their infrastructure can only work on old-school RSA keys right now (they’re working on modernizing).

#PGP #GnuPG #CAcert #KeySigningParty #cryptoparty #WebOfTrust

@lambo

Das fühlt sich sehr gut an, wenn eine Idee aufgegriffen wird!

Tut zwar jetzt nichts zur Sache, aber bei einer #Cryptoparty geht es nicht nur um E-Mail-Verschlüsselung. Die der @dchsg enthalten zusätzlich:
• Sichere Passwörter und Passwortverwaltung mit KeePassXC
• Festplatten verschlüsseln mit VeraCrypt
• Spurenarmes und anonymes Surfen mit Firefox und Tor
• Smartphone statt Taschenspion
Mehr dazu auf https://cryptoparty.in .

Vielleicht hast du an eine #keySigningParty von Früher gedacht – ein sehr nerdiges Event. Ich hoffe, die #Fediparty erreicht mehr Leute.

/cc @ueckueck @tibhannover @MalteHollmann @datenteiler @fraueickmann @SemAntiKast @cochise @goettker @corinnaehlers @lingucat @kbusse @anotherfami @JRehborn

🇬🇧 en : Heye, #Fediverse fellows, I am having questions about #GPG usages now that the #KeySigningParty (#KSP) during @capitoledulibre is coming soon.

We care and endeavor to care about our personal information not to land within GAFAM* address books, since they will be used for target marketing and more.

However, it's common practice to upload our keys on a public #KeyServer, allowing access (even by scripts) to our #WebOfThrust, thus our contacts and e-mails.

Is it still appropriate today ?