In cryptography, a web of trust is a concept used in PGP, GnuPG, and other OpenPGP-compatible systems to establish the authenticity of the binding between a public key and its owner. Its decentralized trust model is an alternative to the centralized trust model of a public key infrastructure (PKI), which relies exclusively on a certificate authority (or a hierarchy of such). As with computer networks, there are many independent webs of trust, and any user (through their identity certificate) can be a part of, and a link between, multiple webs.
The web of trust concept was first put forth by PGP creator Phil Zimmermann in 1992 in the manual for PGP version 2.0:
As time goes on, you will accumulate keys from other people that you may want to designate as trusted introducers. Everyone else will each choose their own trusted introducers. And everyone will gradually accumulate and distribute with their key a collection of certifying signatures from other people, with the expectation that anyone receiving it will trust at least one or two of the signatures. This will cause the emergence of a decentralized fault-tolerant web of confidence for all public keys.
Read more about Web Of Trust: Operation of A Web of Trust, Contrast With Typical PKI, Web of Trust Problems, Doing The Math, Mean Shortest Distance
Famous quotes containing the words web of, web and/or trust:
“But pale despair and cold tranquillity,
Nature’s vast frame, the web of human things,
Birth and the grave, that are not as they were.”
—Percy Bysshe Shelley (1792–1822)
“Thou blind man’s mark, thou fool’s self-chosen snare,
Fond Fancy’s scum and dregs of scattered thought,
Band of all evils, cradle of causeless care,
Thou web of will whose end is never wrought;
Desire! desire, I have too dearly bought
With price of mangled mind thy worthless ware;”
—Sir Philip Sidney (1554–1586)
“A noble person confers no such gift as his whole confidence: none so exalts the giver and the receiver; it produces the truest gratitude. Perhaps it is only essential to friendship that some vital trust should have been reposed by the one in the other. I feel addressed and probed even to the remotest parts of my being when one nobly shows, even in trivial things, an implicit faith in me.... A threat or a curse may be forgotten, but this mild trust translates me.”
—Henry David Thoreau (1817–1862)