Modernizing Web-of-trust for Organizations

Andrew Gallagher andrewg at andrewg.com
Thu Jan 4 09:25:27 CET 2018


> On 4 Jan 2018, at 04:42, Lou Wynn <lewisurn at gmail.com> wrote:
> 
> It has a client key and uses it to log into the server, which is
> similar to SSH key authentication, to retrieve the private key after
> authentication.

This bit confuses me. If you already store a private key locally, why use it to download a second private key? If you’re using a key escrow system then surely you just need to upload the private key once and keep a local copy?

A



More information about the Gnupg-users mailing list