User Tools

Site Tools


keyoxide

This is an old revision of the document!


Keyoxide

Keyoxide verifies online identity with cryptography.

Once you have a PGP key pair, there are two ways to set identity.

  1. Annotate your OpenPGP profile (public key) with “proofs”. (Uploading this to their server creates a profile page. (My Keyoxide profile page.))
  2. Sign a Signature Profile (text file) with “proofs”. (You can send this to people. Not super useful yet.)

Instructions for Annotating your PGP Public Key

For each location you want to prove, you have to do two things:

  1. Add some proof at the site. Like a Gist with proof text at Github, or a TXT record with proof text in a DNS entry.
  2. Point to the above proof with an Identity Claim in the signature profile (text file) or OpenPGP profile.

Create a Keyoxide profile by uploading an annotated key to keys.openpgp.org.

Annotating

$ gpg --edit-key MYKEYFINGERPRINT
...
gpg> showpref  # lists current notations
...
     Notations: proof@ariadne.id=dns:dblu.me?type=TXT
                proof@ariadne.id=https://mastodon.social/@dblume
                proof@ariadne.id=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea
                proof@ariadne.id=dns:dlma.com?type=TXT
gpg> notation
Enter the notation:proof@ariadne.id=dns:mynewdomain.com?type=TXT
gpg> save

First time OpenPGP Profile (Public Key) Upload

gpg --armor --output public.asc --export MYKEYFINGERPRINT

go to https://keys.openpgp.org/upload and upload the public.asc you have created in the code above.

Subsequent changes to key annotations

Add/Remove/Edit an annotation in your public key.

gpg --keyserver hkps://keys.openpgp.org --send-keys MYKEYFINGERPRINT

Example Signature Profile

(Again, not super useful yet.)

Starting with a text file with proofs in it:

mysignature.txt
See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54
 
proof=https://mastodon.social/@dblume
proof=dns:dlma.com?type=TXT
proof=dns:dblu.me?type=TXT
proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea
 
Check this signed message by pasteing it into https://keyoxide.org/sig

Sign it with gpg -u EMAIL_ADDRESS –clear-sign mysignature.txt, and get an asc file like:

mysignature.txt.asc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
 
See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54
 
proof=https://mastodon.social/@dblume
proof=dns:dlma.com?type=TXT
proof=dns:dblu.me?type=TXT
proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea
 
Check this signed message by pasteing it into https://keyoxide.org/sig
-----BEGIN PGP SIGNATURE-----
 
iQFDBAEBCgAtFiEEHL1JnGHHo6fe05NfXiHA1A7Z61QFAmRy/BwPHGRhdmlkQGRs
bWEuY29tAAoJEF4hwNQO2etUL+QIAJUh9sOIen1sOHtVdcop5bcoq+Zwf2wrSE1C
a8DdVlWRjW38x35ElQj1D6j+M9RhCkcUepgLa+UikofeyLHZAME1wu1aNjRwaDGN
iWGE5TCZJYgBzo3vQPmkixL+Ij0vN8O+Dr9AqP6Yq5ZmVc/qQGdPhtfcVMa81y4N
FR5IBYMERgC1sNdXf2PmJDA1taHzJq1Tn6mxoF+2xn2JFfKZX8MskSJKi+9uJa3z
JZ05HZcMPFPvuBKowpdtRld9bh3AqmYT/3e3WppyAo5dbPSBd67Aoih9yYoVbpFk
dDUh2//1xy2WA8G76QPTrUnzAAgIyaURQkVi7oNi8/SuZNuHKDQ=
=y6J3
-----END PGP SIGNATURE-----

This can be verified at https://keyoxide.org/sig.

keyoxide.1685257361.txt.gz · Last modified: 2023/05/28 00:02 by dblume