Bitcoin Forum

I was wondering if we could have an automatically locked subforum somewhere just for PGP key lookups. Putting it in a sig is largely worthless if an account is compromised.

If someone, say, asks for a loan, I may trust the person I knew the account-holder as, but I no longer automatically trust the person posting is the poster I knew.

Though, then the risk is the unpublished sale of an account along with PGP privkey and email account... but it's still a solid extra bit of defense, I'd think.

Ideally, we'd be able to post and lock a PGP key to our account, similar to how Skype, IRC handles, and email addresses can be tied to an account and show as a little button on forum posts (though there'd need to be some type of significant time lock for a change of displayed key to go through, or maybe some type of 2FA).

I'm a big fan of this idea, with account selling this would help to make sure the person is who you think it is.

well there's this: https://bitcointalk.org/index.php?board=129.0 I post my gpg keys there.

Sounds reasonable. Will post and lock. Maybe will start a trend.

Could still be altered if account is compromised.

Not if locked. Users also don't have the right to delete their own threads in that subforum. The best they could do is ask a mod to delete.

Good to know.

Can an account be recovered if we've posted a PGP key and can sign a message stating it's been compromised?

Before this, can we get the forum software to start encrypting email notifications it sends out?

But they can unlock it. The edit will be visible, though.


Yes.

I tried adding msg # and topic # to locked thread (https://bitcointalk.org/index.php?action=post;msg=3111069;topic=290554.0) since there's no displayed edit button but received "Topic is locked..." message. Is there an unlock button I'm missing?

& if PGP can be used to recover an account, does that technically count as 2FA? I know a lot of people were asking for it. :P

Good idea! I'd like to see an extra sub for it, reputation is not really fit for pgp keys in my opinion.

It's at the bottom of the topic page.

Whoa. I never knew that - never looked that far down. I never knew I could move my own threads, either (or change the title of the thread for all replies).  :o Oh well, there goes that idea.

Made a post with a yellow tamper evident sticker.

It's a bug that lets you choose icons you shouldn't have access to. Editing a post without performing that bug will reset the icon, thus creating a 'tamper evident sticker' - unless the person editing has access to the icons or is aware of the bug.

How should we deal with key expiration? I always set my key to expire in 12 months and have to edit it on a yearly basis. Would it be ok to unlock my thread, post a followup and lock it again?

I am winrar?  ;D

(took a lot more trial and error than I expected)

That's great

Now when can we expect to have the PGP key forum?

or maybe an actual function to pgp sign your posts?

and an info at the bottom "positive PGP signed" ?

edit: something like [PGP]TEXT | PGP SIG[/PGP] tags, the PGP Code is hidden and > info at the bottom "positive PGP signed"

Maybe it's a good time to bring up my other thread: https://bitcointalk.org/index.php?topic=235794 [GnuPG signed postings and PMs for download]

Can a mod please place the tamper-evident sticker on https://bitcointalk.org/index.php?topic=291161.0?

There's nothing to be placed, if the post is edited it will show.  The only way that it could be changed without showing that is if someone had direct database access, or if it was edited by you within 5 minutes of it being posted.

Not if a moderator locks it.