And because of this they are SPo*s and contradict the decentralized (aka fediversed) nature of PGP.
Can't agree here. The great virtue of OpenPGP/LibrePGP is that it doesn't really have a governing philosophy: rather, it provides the definitions, data formats, and protocols for people to assemble a cryptographic solution that dovetails with their governing philosophy.
Is it possible to use *PGP in a federated way? Absolutely. But it's in no way necessary to use the protocol, which works fine with centralized key distribution.
To be clear, I'm not objecting to Werner's characterization of sites like keys.openpgp.org being single points of failure. I'm objecting to the idea decentralization is a core part of *PGP, as opposed to it being just another capability that can be used or discarded as the situation demands.
_______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
