Using GnuPG

Working with GnuPG requires you to work with the command line! Recommended only for people with advanced computer skills.

Creating a profile

To create an OpenPGP profile, you need to generate your own OpenPGP key pair. You only need to generate this key pair once. After this step, you will add and remove claims using always the same key pair.

To generate your own OpenPGP key pair, follow the instructions in the OpenPGP with GnuPG guide or the OpenPGP with Kleopatra guide.

Adding an identity claim

All identity claims stored inside keys start with proof@ariadne.id=. Never change this part! More information on the Ariadne Identity page.

Edit the key (make sure to replace FINGERPRINT):

gpg --edit-key FINGERPRINT

Get a list of user IDs and find the index of the one to add the identity claim to:

list

Select the desired user ID (make sure to replace N):

uid N

If you don't select a user ID and your key has multiple user IDs, the identity claim will be added to all of them. It's best to avoid this as it may cause redundant identity verifications.

Add a new notation:

notation

On this website, from the menu on the left, choose a service provider for which to verify an account. Follow the instructions on that page.

Enter the notation (make sure to replace CLAIM with the information from the documentation page):

proof@ariadne.id=CLAIM

# Example: proof@ariadne.id=dns:yourdomain.org?type=TXT

Save the key:

save

Upload the updated OpenPGP key to keys.openpgp.org or Web Key Directory.

Listing identity claims

Edit the key (make sure to replace FINGERPRINT):

gpg --edit-key FINGERPRINT

List detailed preferences:

showpref

You should now see your key details, uid, and proofs assigned to your keys:

[ultimate] (1). Your Name <your@email>
  Cipher: AES256, AES192, AES, 3DES
  Digest: SHA512, SHA384, SHA256, SHA1
  Compression: ZLIB, BZIP2, ZIP, Uncompressed
  Features: MDC, Keyserver no-modify
  Notations: proof@ariadne.id=dns:yourdomain.org?type=TXT

Exit gpg:

quit

Deleting an identity claim

Edit the key (make sure to replace FINGERPRINT):

gpg --edit-key FINGERPRINT

Launch the notation prompt:

notation

Enter the - (minus) symbol followed by the proof you want to delete:

-proof@ariadne.id=CLAIM

# Example: -proof@ariadne.id=dns:yourdomain.org?type=TXT

To make it easier to enter the right proof, you could first list all the claims and simply copy the proof (including "proof@ariadne.id=") you want to delete.

You can also enter none to delete all notations.

Save the changes:

save

Upload the updated OpenPGP key to keys.openpgp.org or Web Key Directory.

Adding an avatar

Libravatar

You can create an account on Libravatar.org or run your own instance, both methods are supported by Keyoxide.

Make sure your Libravatar account's email address is the same as the one in your OpenPGP key.

Gravatar

If you prefer to use Gravatar, you can create an account on Gravatar.com.

Make sure your Gravatar account's email address is the same as the one in your OpenPGP key.