从优秀到卓越：使用比特币和区块链增强PGP
From Pretty Good To Great: Enhancing PGP using Bitcoin and the Blockchain
摘要：
PGP建立在分布式信任网络之上，其中用户的可信度由其他人建立，这些人可以通过数字签名为该特定身份提供担保。阻止其大规模采用的是一些固有的弱点，包括（但不限于）以下内容：1）信任关系建立在主观荣誉系统上，2）只有第一级关系可以完全信任，3）信任级别难以用实际值量化，以及4）信任网络本身的问题（认证和背书）。虽然PGP提供的安全性被证明是可靠的，但它在很大程度上未能获得大规模采用。在本文中，我们提出了几个新的贡献，以解决上述问题与PGP和相关的Web的信任。为了解决信任网络的主观性，我们提供了一种基于比特币的新证书格式，允许用户使用比特币身份验证交易来验证PGP证书-形成与实际值相关联的第一级信任关系（即，在交易过程中转移的比特币数量）。其次，我们提出了一种新的分布式PGP密钥服务器的设计，它利用比特币交易区块链来存储和检索基于比特币的PGP证书。最后，我们提供了一个Web原型应用程序，它在实际环境中演示了其中的一些功能。
英文摘要：
PGP is built upon a Distributed Web of Trust in which the trustworthiness of a user is established by others who can vouch through a digital signature for that particular identity. Preventing its wholesale adoption are a number of inherent weaknesses to include (but not limited to) the following: 1) Trust Relationships are built on a subjective honor system, 2) Only first degree relationships can be fully trusted, 3) Levels of trust are difficult to quantify with actual values, and 4) Issues with the Web of Trust itself (Certification and Endorsement). Although the security that PGP provides is proven to be reliable, it has largely failed to garner large scale adoption. In this paper, we propose several novel contributions to address the aforementioned issues with PGP and associated Web of Trust. To address the subjectivity of the Web of Trust, we provide a new certificate format based on Bitcoin which allows a user to verify a PGP certificate using Bitcoin identity-verification transactions - forming first degree trust relationships that are tied to actual values (i.e., number of Bitcoins transferred during transaction). Secondly, we present the design of a novel Distributed PGP key server that leverages the Bitcoin transaction blockchain to store and retrieve Bitcoin-Based PGP certificates. Lastly, we provide a web prototype application that demonstrates several of these capabilities in an actual environment.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
