The PGP approach

• We don't trust anyone (especially big corporate monopolies) expect people that we know.

• You sign the key's of people you know in order to vouch for them.

• Other people can choose to trust your signature as much as they trust you.

• A distributed web of trust is created.