I have added it for the to do list for now, not sure yet.


Note the explanation below is simplified to give a rough idea about PGP. There are many detailed aspects to it that I dont want to go into here.

PGP is used since the early 90's. Its an asymmetric encryption / signature system that is used for a multitude of things now. Its now most commonly used for its intended use, to encrypt and sign mails. The encryption was so powerful that it was against USA law to export the software for a while unless significantly weakened. It had to leave the country via source code printed in a book. This is typically refered to as the crypto wars.

Without going into technical details, the main difference is how people use it. Its more likely for someone here to post a bitcoin address than it is for someone to post a full PGP key. While many of us have several bitcoin addresses to sign something with, you usually only have one or very few PGP keys (1 personal, 1 business, 1 software development, etc.). For PGP there also exists what is called the Web of Trust (WoT). If used correctly it allows you to be 100% sure that the person you are exchanging message with is exactly the person they claim, as in: it has been verified in person by someone you trust and have met in person. The biggest problem with PGP keys is to verify its owner. Same like a bitcoin address anyone can just create a PGP key pair and claim to be Bill Murray.

But, say Bill Murray (B) meets Christoph Waltz (C) in person. They sign each others keys to verify the respective owner. Should I ever meet C I can personally verify C's key and thus know B's key belongs indeed to Bill Murray. These chains are typically longer and form a complex network, the Web of Trust.