A step-by-step guide to building a transparent keyserver for age public keys using transparency log technology. The implementation adds cryptographic accountability to a centralized service through Tessera and Torchwood libraries, incorporating VRFs for privacy protection, anti-poisoning measures through hashing, and witness cosigning for split-view prevention. The complete solution requires less than 500 lines of code while maintaining unchanged UX and enabling users to monitor all public keys associated with their email addresses.
Table of contents
Transparency logs and accountability for centralized servicesA tlog for our keyserverPrivacy with VRFsAnti-poisoningNon-equivocation and the Witness NetworkSumming upFuture work: efficient monitoring and revocationThe pictureSort: