Whatever happened to PGP?
PGP is often thought of as an encryption system, but your private key is a digital signature that can prove who your message comes from, as well as showing that it hasnít been tampered with.
The reason a Public Key Infrastructure doesnít look like a widespread identity system is that it needs a web of trust; if somebody you know has signed my PGP key, then you take their word that I am who I say I am. That works well for close groups of friends Ė or for the corporations and government departments around the world who rely on PKIs based on the commercial PGP offerings or the OpenPGP SDK thatís now available.
At The Register.
[ Read more ]