From 61d644beda56c3bb0fb5dc5be7447aa67dc4d7de Mon Sep 17 00:00:00 2001 From: Vincent Breitmoser Date: Tue, 2 Jul 2019 15:27:06 +0200 Subject: [PATCH] about: reorder FAQ entries a bit --- dist/templates/about/faq.html.hbs | 96 ++++++++++++++++--------------- 1 file changed, 49 insertions(+), 47 deletions(-) diff --git a/dist/templates/about/faq.html.hbs b/dist/templates/about/faq.html.hbs index dbaf0b0..1d7fd9f 100644 --- a/dist/templates/about/faq.html.hbs +++ b/dist/templates/about/faq.html.hbs @@ -2,13 +2,46 @@

About | News | Usage | FAQ | Stats | Privacy

-

Why not sign keys - after verification?

+

Is this server part of the "SKS" pool?

- The keys.openpgp.org service is meant for key - distribution and discovery, not as a de-facto CA. Client implementations - that want to offer verified communication should rely on their own trust - model. +

+ No. The federation model of the SKS pool has various problems in terms + of reliability, abuse-resistance, privacy, and usability. We might do + something similar to it, but keys.openpgp.org + will never be part of the SKS pool itself. +

+ +

Is keys.openpgp.org federated? Can I help by running an instance?

+ +

+ For the moment, no. + We do plan to decentralize keys.openpgp.org + at some point. + With multiple servers + run by independent operators, + we can hopefully improve the reliability + of this service even further. +

+ +

+ Several folks offered to help out + by "running a Hagrid server instance". + We very much appreciate the offer, + but we will probably never have an "open" federation model like SKS, + where everyone can run an instance and become part of a "pool". + This is for two reasons: +

+
    +
  1. + Federation with open participation requires all data to be public. + This significantly impacts the privacy of our users, because it + allows anyone to scrape a list of all e-mail addresses. +
  2. +
  3. + Servers run as a hobby by casual administrators do not meet our + standards for reliability and performance. +
  4. +

Why is there no support for identities that aren't e-mail addresses?

@@ -68,6 +101,16 @@ on a solution.

+

Why not sign keys + after verification?

+ +

+ The keys.openpgp.org service is meant for key + distribution and discovery, not as a de-facto CA. Client implementations + that want to offer verified communication should rely on their own trust + model. +

+

Why are revoked identities not distributed as such?

@@ -118,47 +161,6 @@ upload keys that can only sign. -

Is this server part of the "SKS" pool?

- -

- No. The federation model of the SKS pool has various problems in terms - of reliability, abuse-resistance, privacy, and usability. We might do - something similar to it, but keys.openpgp.org - will never be part of the SKS pool itself. -

- -

Is keys.openpgp.org federated? Can I help by running an instance?

- -

- For the moment, no. - We do plan to decentralize keys.openpgp.org - at some point. - With multiple servers - run by independent operators, - we can further improve the reliability - of this service. -

- -

- Several folks offered to help out - by "running a Hagrid server instance". - We very much appreciate the offer, - but we will probably never have an "open" federation model like SKS, - where everyone can run an instance and become part of a "pool". - This is for two reasons: -

-
    -
  1. - Federation with open participation requires all data to be public. - This significantly impacts the privacy of our users, because it - allows anyone to scrape a list of all e-mail addresses. -
  2. -
  3. - Servers run as a hobby by casual administrators do not meet our - standards for reliability and performance. -
  4. -
-

I have trouble updating some keys with GnuPG. Is there a bug?