@silhouette@dumbfuckingweb.site
2025-04-03 10:03 UTC
@Xeniax@mastodon.ml Centralised keyservers are unnecessary IMO. Post your public key on your website or attach it to unencrypted emails.
Replies (1)
-
@alexx_net@mstdn.social 2025-04-10 09:53
@silhouette@dumbfuckingweb.site @Xeniax@mastodon.ml key servers such as keys.OpenPGP.org are a useful way firfor others to verify that my website hasn't been compromised. I feel it is more useful to think of a Keyserver as an independent verifier, rather than a "central authority". Admittedly a sufficiently dedicated adversary could MITM "attack" both at the same time, but at that level, they could just send the feds.