Java Glossary : web of trust

Java definitions: 0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

You are here : home : Java Glossary : W words : web of trust.

A scheme in PGP encryption to verify that a given public key truly belongs to who it claims to. The problem in PGP is all certificates are self-signed. There is no certificate authority company who verifies identities or issues certificates. Basically individual users verify other people's public keys attesting to that fact by digitally signing with their private key. Based on who you trust to verify others, you can compute a level of assurance about the owner of any presented given key.

PGP public keys are distributed via websites. You can download my pgp certificate at http://mindprod.com/RoedyGreenPGPkey.asc.

You can also get them via server websites such as ldap://pserver.pgp.com and ldap://europe.keys.pgp.com:11370 available via the PGP-Keys program , but the key's presence there means nothing about its validity. Anybody can register any name with any key.

certificate ¤ PGP

home	Canadian Mind Products
	mindprod.com IP:[24.87.56.253]
	Your IP:[80.134.30.163]
	You are visitor number 396.
	Please send errors, omissions and suggestions
	to improve this page to Roedy Green.
	You can get a fresh copy of this page from:	or possibly from your local J: drive mirror:
	http://mindprod.com/jgloss/weboftrust.html	J:\mindprod\jgloss\weboftrust.html