User Tools

Site Tools


keyoxide

This is an old revision of the document!


Keyoxide

Keyoxide verifies online identity with cryptography.

Once you have a PGP key pair, there are two ways to set identity.

  1. Annotate your OpenPGP profile (public key) with “proofs”. (Uploading this to their server creates a profile page. (My Keyoxide profile page.))
  2. Sign a Signature Profile (text file) with “proofs”. (You can send this to people. Not super useful yet.)

Instructions for Annotating your PGP Public Key

For each location you want to prove, you have to do two things:

  1. Add some proof at the site. Like a Gist with proof text at Github, or a TXT record with proof text in a DNS entry.
  2. Point to the above proof with an Identity Claim in the signature profile (text file) or OpenPGP profile.

Create a Keyoxide profile by uploading an annotated key to keys.openpgp.org.

Annotating

$ gpg --edit-key MYKEYFINGERPRINT
...
gpg> showpref  # lists current notations
...
     Notations: proof@ariadne.id=dns:dblu.me?type=TXT
                proof@ariadne.id=https://mastodon.social/@dblume
                proof@ariadne.id=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea
                proof@ariadne.id=dns:dlma.com?type=TXT
gpg> notation
Enter the notation:proof@ariadne.id=dns:mynewdomain.com?type=TXT
gpg> save

First time OpenPGP Profile (Public Key) Upload

gpg --armor --output public.asc --export MYKEYFINGERPRINT

go to https://keys.openpgp.org/upload and upload the public.asc you have created in the code above.

Subsequent changes to key annotations

Add/Remove/Edit an annotation in your public key.

gpg --keyserver hkps://keys.openpgp.org --send-keys MYKEYFINGERPRINT

Example Signature Profile

(Again, not super useful yet.)

Starting with a text file with proofs in it:

mysignature.txt
See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54
 
proof=https://mastodon.social/@dblume
proof=dns:dlma.com?type=TXT
proof=dns:dblu.me?type=TXT
proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea

Sign it with gpg -u EMAIL_ADDRESS –clear-sign mysignature.txt, and get an asc file like:

mysignature.txt.asc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
 
See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54
 
proof=https://mastodon.social/@dblume
proof=dns:dlma.com?type=TXT
proof=dns:dblu.me?type=TXT
proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea
-----BEGIN PGP SIGNATURE-----
 
iQFDBAEBCgAtFiEEHL1JnGHHo6fe05NfXiHA1A7Z61QFAmRyuY0PHGRhdmlkQGRs
bWEuY29tAAoJEF4hwNQO2etUunQIAKffjiUmAk0km8yn5TMHTYWbc3nHz+euaQ1B
xHEA9jRc746cfn2aVaSJzWdqIfVJu85H/vb56sBGZMNR/eSxNwJjLmu87kbN/3eb
Ef0/5tXB2ftQE6wGpJB+SwL0aTnXdxA9x+ppFcxn+kFT2vgU0hn89oNT0fsy9heL
bVE2oTIa7rXOYBheqAUEgQBMOgKeF3Z38XhhKfwHr6rOwqO9frxxmNcpBGHQop7u
k8pHIBtUh/QbkmxvL0c09BNxQPxSDCgfxMIFe4VzdzRNPTEm+09hu62OiAZ74VFe
F6golgZXU0slovISw6Y/+FSxnXlEVew3G7vLu+EZqCtVKO0hDzo=
=G16H
-----END PGP SIGNATURE-----

This can be verified at https://keyoxide.org/sig.

keyoxide.1685242154.txt.gz · Last modified: 2023/05/27 19:49 by dblume