Hacker News Reader

The so-called web of trust is meaningless security theatre.

>They urgently need to make a "modern version" of GPG.

Absolutely not.

> The so-called web of trust is meaningless security theatre.

Ignoring your comment’s lack of constructive criticism, I’m going to post this meaningful implementation that an excellent cryptographer, Soatok Dreamseeker, is working on: [1].

You may also search for his posts in this HN thread, his nickname is “some_furry”.

[1]: https://github.com/fedi-e2ee/public-key-directory-specificat...

Keyservers already “solved” this problem without needing federation because we only needed one keyserver anyway. Federating them isn’t going to do anything. Web of trust is a broken system that sounds super cool until you try to really use it. It has so many flaws that there’s really no way to revive it. Keybase tried to do something about it and also failed.

To be clear, this is not Web of Trust. It's using Key Transparency as a means to distribute public keys more securely than TOFU.

If people want to build WoT on top of ny design, I won't stop them, but it's not a goal of mine.

Keybase was doing great until it got acquired by Zoom and people felt uneasy about the implications, IIRC

Reply on news.ycombinator.com