Re:Are we self-sovereign PKI yet?
by lrvick on Tuesday May 26, 2026 @03:56PM
(#48285150)
Self-sovereign PKI identity, key discovery, file encryption, artifact, code, review signing, security disclosures, boot signing etc etc.
[ Parent
| on HN ]
Who's reinventing a tool that can do all that?
No one. The influencers are simply telling you you're wrong if you think you need that.
Which is the thing, we do need a single key that can be used for all those things. So we get PGP.
> No one.
I thought everyone was "trying so hard to re-invent PGP".
> we do need a single key that can be used for all those things
We do? This is not obvious. Why does my disk encryption key need to be the same that I use to sign binaries that I release?
It is hard enough for people to keep up with one keychain, let alone a dozen of them for every use case in their lives.
PGP keychains allow you to have a single 24 word mnemonic seed to recover your entire digital identity, data access, etc. The UX is strictly better than the commonly suggested hodge podge of flavor of the week alternatives.
Standards make interoperability a lot easier.
Re:Are we self-sovereign PKI yet?
by noman-land on Tuesday May 26, 2026 @05:11PM
(#48286021)
Don't forget authentication! Been using pgp keys on smart cards as ssh keys for ages.