[guardian-dev] Physical key exchanges

[Tolo]

Hello,

I have been considering alternatives to online key exchanges due to
increasing fears of man-in-the-middle attacks by governments in the Arab
region and compromised (or under-duress) individuals in the Web of
trust. I am considering an actual physical key (USB or card) exchange to
simplify the process of key exchange amongst people on the ground and a
easy mechanism to collectively isolate and remove compromised
individuals from the WOT. I also am considering limiting the WOT and
relying on Tor-style relaying of messages through a trusted group that
becomes the 'inner' WOT that's unique to each individual. Has there been
any work done in this area that I can build off?

Regards,
Ahmed