Clojurians Log v2

Yeah it's a way to get hard-to-verify PGP keys associated with more or less trusted accounts and critically signatures/proofs of key access published thereby. You all trust that I own http://arrdem.com and http://twitter.com/arrdem, but what PGP key I use may not be obvious and a malicious user could generate a key with one of my email addresses, upload it to the MIT keyserver or somewhere and conduct a man in the middle attack by decrypting mail to the fake key, and reencrypting it and forwarding it to me. By associating a single key with several other identities and offering proof signatures that I control that key it becomes easier to find public keys, and easier to validate that the single individual you want to contact is in fact in control of that key.

If you can cut down that whole process to one click you will get the 99% (the ones that never ever understand what you just wrote) to take part in key signing, otherwise the situation will remain as it is, I am afraid.

keybase gets pretty close to that. I agree it's a UX problem over technology that's existed for decades, but here we stand.

that looks interesting, I did not know that. Do you have an invite maybe?

I have invites

one can say that one click it is too quick, too soon, you should need to understand a bit of the trust model and how to properly identify people before you sign their key, but I agree gpg is just too complicated, that is why I have scripts for signing keys