Conversation

@Tryphon The PGP WOT's core concept goes like this:

1. I publish claims with my key, e.g. "this key belongs to Bjarni."

2. Others sign these claims to vouch for their truthfulness.

3. You calculate a trustworthiness score for a key by finding paths through the social graph of attestations.

It conflates "This key is safe to use" with "a claim was truthful", with "I convinced people of something", with "I am to be trusted to evaluate others' claims."

These are not sane or safe equivalences.