a question about keyservers

[Anton Shepelev]

Robert J. Hansen:

> To be clear, I'm not objecting to Werner's
> characterization of sites like keys.openpgp.org being
> single points of failure. I'm objecting to the idea
> decentralization is a core part of *PGP, as opposed to
> it being just another capability that can be used or
> discarded as the situation demands.

I am with Werver on this one: It is by desing that PGP
works locally offline, with no requirements for a data
exchange protocol, which may happen by any internet
channel, or physically, when a you pass a piece of paper
to another person.

Futhermore, all data exchage can take place on a point-
to-point basis, without any intermediary whatsoever.
Therefore, I see keyservers as a centralised
superstructure put on top of the decentralised PGP
basis.  PGP works with any centralised third-party
services exactly because it is decentralised by nature.

Conversely, you cannot put a decentralised
superstructure on top of a centralised system.

-- 
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20261021/6ed7e8d7/attachment.sig>