Skip to content

Why I Love PHP Keys

Sovereign Identity, Scriptable

I use PHP to generate, sign, and verify cryptographic identities — especially:

  • gpg via PHP shell
  • OpenSSL for lightweight crypto ops
  • JSON-based key records, linked across apps

I don't depend on anyone else's server or auth.

PGP = Private Trust

PGP lets me:

  • Sign arbitrary objects (apps, files, records)
  • Attach private trust scores to keys
  • Build an internal trust ledger across projects

All cryptographically signed. Sovereign. Verifiable.

Keybase = Public Trust Layer

Keybase gives me:

  • Social proofs (Twitter, GitHub, etc)
  • A signed, immutable sigchain
  • Easy cross-device key sync
  • Encrypted team chat + KBFS

I link my PHP keyring with my Keybase identity — one trust web, two layers.

Web of Trust

Each package I build (Meteor, Electron, Daemon) is:

  • Signed with a GPG key
  • Trust scored
  • Proven in Keybase

It's not about centralized auth — it's about verifiable integrity across all interfaces.

CLI Style Example

```bash gpg --default-key mykey@example.com --sign config.json ````

And later, verify via CLI or programmatically.