Using PGP for verifying software doesn't work and it is often counterproductive. Users don't understand what they are doing. They don't use PGP and they don't have a WoT so, what's the point.
The worst part is that those same users would demand a step-by-step instructions about how to verify the software. What are the alternatives?
lontivero
npub1nc…dz7mj
2024-05-31 19:30:25
Author Public Key
npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mjPublished at
2024-05-31 19:30:25Event JSON
{
"id": "0000522c744d1291b41192abe3b5f3f6ea46b9c0c3dc4e0f52e4ca3994195e2c",
"pubkey": "9e30e940238cd9ebebc6328176dd4d109812129442f2a6c38727fc66fa7ea90a",
"created_at": 1717183825,
"kind": 1,
"tags": [
[
"nonce",
"9223372036854784769",
"16"
]
],
"content": "Using PGP for verifying software doesn't work and it is often counterproductive. Users don't understand what they are doing. They don't use PGP and they don't have a WoT so, what's the point.\nThe worst part is that those same users would demand a step-by-step instructions about how to verify the software. What are the alternatives? ",
"sig": "157625a8e8d930ec96210cadc3efc29bf1d9941d63db34d75283a22516a171cd3fe1c3c11db607f05d711e8212686de01d678ac6f55e817ffe73eb51f0a3e5fb"
}