Best Practice for GPG Keys on Biz Cards

@ethannorth Ethan North
Fri, 26 Aug 2016 10:44:24 +0000

With respect to forged short IDs and keyserver confusion in general, you may want to point potential correspondents towards this key server:

https://keys.mailvelope.com/

They verify key submissions, before publishing your key, by emailing you a link that is encrypted with your public key, thereby verifying that you control the email address and the private key.

This key server doesn't federate with other key servers or use the web of trust, so it's bad for core infrastructure developers who sign code and rely on the web of trust.

However, it's a much cleaner and more secure experience for people who just want to write emails, since their verification process eliminates the forged key problem.

Standard disclaimer: I am not affiliated with Mailvelope. My opinions are my own.