Hacker News Reader

>key distribution GPG key servers?

And how do you trust those? And if I'm a brand new user, how do I get my key in there?

All the moving parts probably exist, but so far no one has pulled it together into something that a random person off the street can use.

Its not the problem JMAP is trying to solve.

You don't need to trust the keyservers since you verify the fingerprints of downloaded keys against the fingerprints given to you in person.

The keyserver protocol includes commands to include keys in the keyserver network. How you send keys depends on the UI of the tool you use, geeks will do this:

gpg --keyserver <keyserver> --send-keys <fingerprint>

Right. I'm a little rusty on the details. My point stands - key distribution is not a solved problem for the average user.

It is solved for some specific platforms, GNOME for example:

https://mail.gnome.org/archives/gnome-announce-list/2014-Nov...

The average user doesn't use GNOME or Linux though :(

Reply on news.ycombinator.com