Email addresses can be hacked or perhaps even spoofed. I need to pay individuals via paypal and I fear that over time people's email will change or become compromised. How can I ensure I am paying the right individual?
If I ask them to give me a personal password and in return I give them each a unique public key, will that be enough to verify their identity assuming they took precautions to remove the email with the public key and place the key in a secure place?
The target audience will likely be people who have no idea what gpg is. And some would want to remain anonymous. And others would not want to give their mobile number.
Alternatively, is there a there a website that could handle all of this?
Another point on the importance of the question: A thief is one thing, it will annoy me and perhaps even hurt my feelings and rob the intended individual. But there's a more serious threat. If you've paid any attention to the news over the last few years there are certain "people" bent on "causing terror". If it fell into their hands it would put lives at risk. I certainly don't want to be party to that.