melvincarvalho on Nostr: Never forget GPG ... The Web of Trust is practically dead and can be considered a ...
Never forget GPG
...
The Web of Trust is practically dead and can be considered a failure. The question arises on how the trust in PGP keys can be restored. Some people argue the community should look at mobile messenger services.
...
“We’ve known for a decade this attack is possible. It’s now here and it’s devastating” rjh
...
The spam signatures and also those of the sister of your friends - are no longer imported into the local keychain. This doesn’t affect manually imported keys.
This solves the signature spam abuse for GPG users. But it comes with a hefty price tag.
...
https://inversegravity.net/2019/web-of-trust-dead/Published at
2024-09-15 12:37:11 GMTEvent JSON
{
"id": "5728b4215f9c255ebc67c6a7aaf7a46f69ddd20015376ea95af66e7ce56375c9",
"pubkey": "de7ecd1e2976a6adb2ffa5f4db81a7d812c8bb6698aa00dcf1e76adb55efd645",
"created_at": 1726403831,
"kind": 1,
"tags": [],
"content": "Never forget GPG\n\n...\n\nThe Web of Trust is practically dead and can be considered a failure. The question arises on how the trust in PGP keys can be restored. Some people argue the community should look at mobile messenger services.\n\n...\n\n“We’ve known for a decade this attack is possible. It’s now here and it’s devastating” rjh\n\n...\n\nThe spam signatures and also those of the sister of your friends - are no longer imported into the local keychain. This doesn’t affect manually imported keys.\n\nThis solves the signature spam abuse for GPG users. But it comes with a hefty price tag.\n\n...\n\nhttps://inversegravity.net/2019/web-of-trust-dead/",
"sig": "535bb57b6bc5365774c711066259a618ba8931fe5b946c36797ceafd0c54d3ec48740798aa0cb1116e457beeb398480578d6f041de13a8a78c20b294e8c68935"
}
