back

by ashitlerferad·10y ago·view on hn ↗
They could create a new private key using your name. Most people will trust 'Verified' on a web page more than the OpenPGP web of trust.
4 comments
Most people will, but this is written by a Debian developer and they're one of the few groups of people who actually make use of the OpenPGP web of trust.
To emphasise this, there is an evil duplicate of the OpenPGP "strong set" here:

https://evil32.com/

Not sure why you're being downvoted, this "what is the threat model here" was my first thought, too, and this comment is also correct, as well.
Probably my "Most people" quip.
The xkcd trust model https://xkcd.com/1181/