is it better to share my fingerprint? how do you guys usually do it 5E69E6517C60D4E41BCBA80B0B631EEDA88DA704

Reply to this note

Please Login to reply.

Discussion

Have you published your public key to any keyserver?

No, I don't think so.

Then there is no way for anyone to send you an encrypted message... You need to first share the public key. There are multiple ways, but the most convenient is to upload it to a keyserver. For example https://pgp.mit.edu/

It is better to share your key fingerpint, and nostr:npub1ajdaw3j4g6aqv86alhn3df8jpulj0mxz3jjgwpm4uh598hc348gqthdt20 is spot on about having to publish your public key.

Message + public key = cipertext

Ciphertext + private key = message

So we need the public key to encrypt (and you need the private key to decrypt).

Sharing your fingerprint is how we search for your public key on PGP key servers.

We can also search for keys by email address, but since anyone can upload any key and claim that it belongs to your email address, we want to get the fingerprint directly from you to make sure we have the correct one.

Handing over your fingerprint used to be done in person, but I guess those days are largely behind us now. 🫤