Web of trust

Frank Tobin ftobin@neverending.org
Thu Jun 6 01:05:01 2002


On Wed, 5 Jun 2002, [iso-8859-1] David Picn lvarez wrote:

> My question is: is there a better way to do this? Are there chances that
> webs of trust will increase in the future? I just have the feeling that
> cryptography is sort of falling out of use, and I don't see much of a
> possibility that the web of trust will be ever thick enough.

I agree that the WoT needs 'help', and that is the reason I developed
keystory, to help complement the web of trust:
http://keystory.sourceforge.net/

The basic idea behind keystory is that you give it a bunch of email (e.g.,
by processing your incoming mail, or giving it an archive of a mailing
list), and it provides a bit of reporting about which email addresses sign
messages with which keys (keystory checks both clearsig and PGP/MIME
messages).

I keep a cgi-driven frontend to keystory available on one of my machines,
and every month I update it's database with the archives of the
gnupg-users and gnupg-devel mailing lists.

-- 
Frank Tobin			http://www.neverending.org/~ftobin/