<div dir="ltr">Hey KB,<div><br></div><div>I'm just replying to ensure people see your message, which was spamfoldered by Gmail. Yahoo and mailman don't mix these days because Yahoo has a strict DMARC policy and mailman breaks email signatures (oh the irony). </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 18, 2014 at 6:52 PM, KB Sriram <span dir="ltr"><<a href="mailto:mail_kb@yahoo.com" target="_blank">mail_kb@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Would adding the profile url as a uid on the key (in addition to<br>
publishing the fingerprint on the corresponding social media site)<br>
permit better corroborative evidence that the same person controls the<br>
key as well as the social media account?<br>
<br>
A client could then search keys by profile url, and select keys with<br>
the profile on the key as well as a matching fingerprint on the<br>
profile web site. It can run entirely on the client using existing<br>
keyservers and social profile web sites, and doesn't rely on a new<br>
service.<br>
<br>
I've created a small client tool that does just this at<br>
<a href="https://github.com/kbsriram/keypan">https://github.com/kbsriram/keypan</a><br>
<br>
It isn't solo key validation by any means, but it is simple and would<br>
provide similar corroborative profile evidence that <a href="http://keybase.io">keybase.io</a> offers<br>
[ie, someone who controls key K can publish to social account S]<br>
but without the complication of a separate service.<br>
<br>
This technique also has some handy secondary effects:<br>
<br>
- People can find your key by your social profile using existing (and<br>
distributed) keyservers.<br>
- Should you want, it's an easy way to consolidate your social<br>
personas via the key.<br>
<br>
-kb<br>
<br>
_______________________________________________<br>
Messaging mailing list<br>
<a href="mailto:Messaging@moderncrypto.org">Messaging@moderncrypto.org</a><br>
<a href="https://moderncrypto.org/mailman/listinfo/messaging">https://moderncrypto.org/mailman/listinfo/messaging</a><br>
</blockquote></div><br></div>