Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Suppose I encounter a trusted PGP key that isn't really who they say they are. I don't want to sign their key and promote that entity.

Can I somehow show my dissidence from the trust that everyone else is giving? I didn't see anything obvious on the Wikipedia page.

If the answer is "no", is there any research that illustrates how this could be accomplished?

share|improve this question

No, it's up to you if you want to trust (or not) person with a lot of signs. It's just a determinant of fairness.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.