keyoxide
This is an old revision of the document!
Table of Contents
Keyoxide
Keyoxide verifies online identity with cryptography.
Once you have a PGP key pair, there are two ways to set identity.
- Annotate your OpenPGP profile (public key) with “proofs”. (Uploading this to their server creates a profile page. (My Keyoxide profile page.))
- Sign a Signature Profile (text file) with “proofs”. (You can send this to people. Not super useful yet.)
Instructions for Annotating your PGP Public Key
For each location you want to prove, you have to do two things:
- Add some proof at the site. Like a Gist with proof text at Github, or a TXT record with proof text in a DNS entry.
- Point to the above proof with an Identity Claim in the signature profile (text file) or OpenPGP profile.
Create a Keyoxide profile by uploading an annotated key to keys.openpgp.org.
Annotating
$ gpg --edit-key MYKEYFINGERPRINT ... gpg> showpref # lists current notations ... Notations: proof@ariadne.id=dns:dblu.me?type=TXT proof@ariadne.id=https://mastodon.social/@dblume proof@ariadne.id=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea proof@ariadne.id=dns:dlma.com?type=TXT gpg> notation Enter the notation:proof@ariadne.id=dns:mynewdomain.com?type=TXT gpg> save
First time OpenPGP Profile (Public Key) Upload
gpg --armor --output public.asc --export MYKEYFINGERPRINT
go to https://keys.openpgp.org/upload and upload the public.asc you have created in the code above.
Subsequent changes to key annotations
Add/Remove/Edit an annotation in your public key.
gpg --keyserver hkps://keys.openpgp.org --send-keys MYKEYFINGERPRINT
Example Signature Profile
(Again, not super useful yet.)
Starting with a text file with proofs in it:
- mysignature.txt
See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54 proof=https://mastodon.social/@dblume proof=dns:dlma.com?type=TXT proof=dns:dblu.me?type=TXT proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea Check this signed message by pasteing it into https://keyoxide.org/sig
Sign it with gpg -u EMAIL_ADDRESS –clear-sign mysignature.txt
, and get an asc file like:
- mysignature.txt.asc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 See https://keyoxide.org/1CBD499C61C7A3A7DED3935F5E21C0D40ED9EB54 proof=https://mastodon.social/@dblume proof=dns:dlma.com?type=TXT proof=dns:dblu.me?type=TXT proof=https://gist.github.com/dblume/19738ca4ba998f2f784904190a1a22ea Check this signed message by pasteing it into https://keyoxide.org/sig -----BEGIN PGP SIGNATURE----- iQFDBAEBCgAtFiEEHL1JnGHHo6fe05NfXiHA1A7Z61QFAmRy/BwPHGRhdmlkQGRs bWEuY29tAAoJEF4hwNQO2etUL+QIAJUh9sOIen1sOHtVdcop5bcoq+Zwf2wrSE1C a8DdVlWRjW38x35ElQj1D6j+M9RhCkcUepgLa+UikofeyLHZAME1wu1aNjRwaDGN iWGE5TCZJYgBzo3vQPmkixL+Ij0vN8O+Dr9AqP6Yq5ZmVc/qQGdPhtfcVMa81y4N FR5IBYMERgC1sNdXf2PmJDA1taHzJq1Tn6mxoF+2xn2JFfKZX8MskSJKi+9uJa3z JZ05HZcMPFPvuBKowpdtRld9bh3AqmYT/3e3WppyAo5dbPSBd67Aoih9yYoVbpFk dDUh2//1xy2WA8G76QPTrUnzAAgIyaURQkVi7oNi8/SuZNuHKDQ= =y6J3 -----END PGP SIGNATURE-----
This can be verified at https://keyoxide.org/sig.
keyoxide.1685257361.txt.gz · Last modified: 2023/05/28 00:02 by dblume