From 1331e9bb5a2e64a76e877990f539a56735813c0e Mon Sep 17 00:00:00 2001 From: Heiko Schaefer Date: Wed, 22 Nov 2023 17:00:11 +0100 Subject: [PATCH] mention "strong set" concept --- book/source/08-signing_components.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/book/source/08-signing_components.md b/book/source/08-signing_components.md index 6958475..ff6e123 100644 --- a/book/source/08-signing_components.md +++ b/book/source/08-signing_components.md @@ -298,7 +298,9 @@ add diagrams? (wot)= ### Decentralized automated trust decisions; or, the "Web of Trust" -The OpenPGP, the "Web of Trust" is a trust model that performs authentication decisions on a set of certifications and delegations. +The OpenPGP, the "Web of Trust" is a trust model that performs authentication decisions on a set of certifications and delegations[^strong-set]. + +[^strong-set]: In the context of the Web of Trust, the so-called [strong set](https://en.wikipedia.org/wiki/Web_of_trust#Strong_set) refers to a set of certificates that are strongly linked amongst each other via third-party certifications. The OpenPGP "Web of Trust" model assumes that every user makes their own choice about who they delegate authentication decisions to. Based on the available certificates and third-party signatures, the user's OpenPGP software uses the Web of Trust mechanism to determine which certificates are considered reliable for an identity.