PGP key forum?

[Kluge]

I was wondering if we could have an automatically locked subforum somewhere just for PGP key lookups. Putting it in a sig is largely worthless if an account is compromised.

If someone, say, asks for a loan, I may trust the person I knew the account-holder as, but I no longer automatically trust the person posting is the poster I knew.

Though, then the risk is the unpublished sale of an account along with PGP privkey and email account... but it's still a solid extra bit of defense, I'd think.

Ideally, we'd be able to post and lock a PGP key to our account, similar to how Skype, IRC handles, and email addresses can be tied to an account and show as a little button on forum posts (though there'd need to be some type of significant time lock for a change of displayed key to go through, or maybe some type of 2FA).

[1713427090]

1713427090

[1713427090]

1713427090

[1713427090]

1713427090

[tysat]

I'm a big fan of this idea, with account selling this would help to make sure the person is who you think it is.

[grue]

well there's this: https://bitcointalk.org/index.php?board=129.0 I post my gpg keys there.

[Kluge]

well there's this: https://bitcointalk.org/index.php?board=129.0 I post my gpg keys there.

Sounds reasonable. Will post and lock. Maybe will start a trend.

[01BTC10]

well there's this: https://bitcointalk.org/index.php?board=129.0 I post my gpg keys there.

Sounds reasonable. Will post and lock. Maybe will start a trend.

Could still be altered if account is compromised.

[Kluge]

well there's this: https://bitcointalk.org/index.php?board=129.0 I post my gpg keys there.

Sounds reasonable. Will post and lock. Maybe will start a trend.

Could still be altered if account is compromised.

Not if locked. Users also don't have the right to delete their own threads in that subforum. The best they could do is ask a mod to delete.

[01BTC10]

Good to know.

[Kluge]

Can an account be recovered if we've posted a PGP key and can sign a message stating it's been compromised?

[justusranvier]

Before this, can we get the forum software to start encrypting email notifications it sends out?

[theymos]

Not if locked.

But they can unlock it. The edit will be visible, though.

Can an account be recovered if we've posted a PGP key and can sign a message stating it's been compromised?

Yes.

[Kluge]

Not if locked.

But they can unlock it. The edit will be visible, though.

I tried adding msg # and topic # to locked thread (https://bitcointalk.org/index.php?action=post;msg=3111069;topic=290554.0) since there's no displayed edit button but received "Topic is locked..." message. Is there an unlock button I'm missing?

& if PGP can be used to recover an account, does that technically count as 2FA? I know a lot of people were asking for it.

[favdesu]

Good idea! I'd like to see an extra sub for it, reputation is not really fit for pgp keys in my opinion.

[theymos]

I tried adding msg # and topic # to locked thread (https://bitcointalk.org/index.php?action=post;msg=3111069;topic=290554.0) since there's no displayed edit button but received "Topic is locked..." message. Is there an unlock button I'm missing?

It's at the bottom of the topic page.

[Kluge]

I tried adding msg # and topic # to locked thread (https://bitcointalk.org/index.php?action=post;msg=3111069;topic=290554.0) since there's no displayed edit button but received "Topic is locked..." message. Is there an unlock button I'm missing?

It's at the bottom of the topic page.

Whoa. I never knew that - never looked that far down. I never knew I could move my own threads, either (or change the title of the thread for all replies).  Oh well, there goes that idea.

[🏰 TradeFortress 🏰]

Made a post with a yellow tamper evident sticker.

[🏰 TradeFortress 🏰]

Made a post with a yellow tamper evident sticker.

Ooo boy, a day full of learning and excitement! How does one choose a yellow square topic icon?

ETA: And is there any board where I *can* delete topics. I noticed I can move threads in the Reputation subforum to somewhere obscure, even though I can't delete it entirely.

It's a bug that lets you choose icons you shouldn't have access to. Editing a post without performing that bug will reset the icon, thus creating a 'tamper evident sticker' - unless the person editing has access to the icons or is aware of the bug.

[dserrano5]

How should we deal with key expiration? I always set my key to expire in 12 months and have to edit it on a yearly basis. Would it be ok to unlock my thread, post a followup and lock it again?

[Kluge]

Made a post with a yellow tamper evident sticker.

Ooo boy, a day full of learning and excitement! How does one choose a yellow square topic icon?

ETA: And is there any board where I *can* delete topics. I noticed I can move threads in the Reputation subforum to somewhere obscure, even though I can't delete it entirely.

It's a bug that lets you choose icons you shouldn't have access to. Editing a post without performing that bug will reset the icon, thus creating a 'tamper evident sticker' - unless the person editing has access to the icons or is aware of the bug.

I am winrar? 

(took a lot more trial and error than I expected)

[jackjack]

Can an account be recovered if we've posted a PGP key and can sign a message stating it's been compromised?

Yes.

That's great

[b!z]

Can an account be recovered if we've posted a PGP key and can sign a message stating it's been compromised?

Yes.

That's great

Now when can we expect to have the PGP key forum?