Avoid Github Backdoors w/ Our New PGP Directory on IPFS

"Our privacy eco-system is flawed"

Our privacy eco-system is flawed

GetMonero

GetMonero.org is on Cloudflare, linked to a Github PGP key. The same Github that took down Tornado Cash in a crisis. The same Cloudflare that hazes Tor.

Whonix

Whonix.org and it’s Public PGP key are on Hetzner. The same cloud company that compromised an XMPP server at the request of the German government.

The Point:

Developers sign binaries with PGP keys, but we trust Microsoft’s Github and government domains to deliver to us accurate public keys to begin with. This means we’re trusting the very mediums of communication that we’re encrypting against, large Big Tech cloud firms.

KeePassXC.org is on Cloudflare, please, I got everything I own in there.

BleachBit.org is on Cloudflare, c’mon mate, I’m deleting sensitive data with root access.

There must be another way.

Starting today, SimplifiedPrivacy.sol & SimplifiedPrivacy.x will offer an uncensored free public directory of PGP keys for popular open source software on IPFS using unstoppable domains. This will act a neutral third party verification tool, not tied to a physical location, like traditional domains. Anyone can compare the PGP keys on the IPFS site to Github binaries and confirm a match. There’s no sacrifice made, since the developer’s original website still remains. Additionally, for beginners, we are making tutorials on how to use the software.

Unstoppable Domains

How Unstoppable domains work is that an Ethereum wallet updates the DNS record to an IPFS website file, outside the reach of government control because it’s not bound to a physical location. But it’s visible to all. In fact, many criticize IPFS because it’s not private. The reason we believe IPFS/Eth are good for this task is BECAUSE it’s transparent.

Solana DNS

Solana domains work like Unstoppable but not an Eth wallet, so they are cheaper. Also it’s more decentralized with easier access for other parties to on-chain data.

Transparent

Because it’s visible to everyone on the Ethereum/Polygon blockchain when the domain is re-assigned, and then visible to the IPFS network when new files are pushed out, it makes quick trickery with PGP keys more difficult to disguise.

We’re starting with…

-Monero Official Wallet, binaryFate’s keys

-Feather Wallet, confirmed to me by totboht on Matrix

-Whonix

-KeePassXC

I reject government domains as a legitimate source of truth, and I stand for the principle of encryption as identity. Now you can verify with an uncensored third party and not trust the infrastructure of our enemy. You can check our guide on how to use IPFS with Brave Browser.

I love you & I won’t give up.