a question about keyservers

Robert J. Hansen rjh at sixdemonbag.org
Wed Oct 21 14:46:47 CEST 2026


> And because of this they are SPo*s and contradict the decentralized (aka
> fediversed) nature of PGP.

Can't agree here. The great virtue of OpenPGP/LibrePGP is that it 
doesn't really have a governing philosophy: rather, it provides the 
definitions, data formats, and protocols for people to assemble a 
cryptographic solution that dovetails with their governing philosophy.

Is it possible to use *PGP in a federated way? Absolutely. But it's in 
no way necessary to use the protocol, which works fine with centralized 
key distribution.

To be clear, I'm not objecting to Werner's characterization of sites 
like keys.openpgp.org being single points of failure. I'm objecting to 
the idea decentralization is a core part of *PGP, as opposed to it being 
just another capability that can be used or discarded as the situation 
demands.




More information about the Gnupg-users mailing list