Silk Road forums

Discussion => Newbie discussion => Topic started by: fuzzymetaball on June 15, 2013, 02:22 pm

Title: No PGP key for vendor?
Post by: fuzzymetaball on June 15, 2013, 02:22 pm

Hi guys,

Total noob question, want to buy something from a vendor but he hasn't supplied his PGP key anywhere. He has listed an email address. Whats the protocol? Do I provide my shipping details without PGP or do I email him and ask him for his PGP key?

Thanks in advance

Title: Re: No PGP key for vendor?
Post by: bunniesinpjs on June 15, 2013, 03:07 pm

Best bet would probably be to send them a message through SR and ask if they have a PGP key. I think a lot of vendors only use the email for if SR goes down.

But if they didn't post a key they might now have one.

Title: Re: No PGP key for vendor?
Post by: br4d on June 15, 2013, 03:13 pm

I only order from guys with PGP Key.
Ask the Vendor first, if he says he doesnt have PGP Key just go to another vendor.

Safety first :P

Title: Re: No PGP key for vendor?
Post by: Tiger on June 15, 2013, 04:47 pm

If it's not on their profile, chances are they don't have one. If they don't have one they probably won't care too much about your security. If they don't care about your security who knows what sketchy shit they're doing-recording addresses, bad packaging etc...

Title: Re: No PGP key for vendor?
Post by: Tessellated on June 15, 2013, 04:54 pm

If a vendor does not use PGP then do not order from them. If they don't bother with encryption they probably won't bother with safe packaging.

Title: Re: No PGP key for vendor?
Post by: fucknuts on June 15, 2013, 05:02 pm

Did you click on the vendor's name and look at his vendor page?  Because usually the PGP key isn't on each individual listing, only on the vendor page.

But, yeah, like everyone says, if they don't have a PGP key, that means they don't give a fuck about your safety, so def don't order from them

Title: Re: No PGP key for vendor?
Post by: fuzzymetaball on June 16, 2013, 01:35 am

Thanks for the replies guys, messaged the vendor and he says he's not set up PGP yet but most of his clients have been using privnote. Seems like a solid vendor with good product and good feedback, is privnote good enough?

Title: Re: No PGP key for vendor?
Post by: astor on June 16, 2013, 02:02 am

No, Privnote is not safe. Whoever runs it can potentially read all the messages. How do you know it isn't run by LE and you're sending your address directly to them?

I try not to reward lazy behavior. Not having a PGP key is a showstopper for me. There are enough competing vendors for most products that you can choose one who takes your security seriously by providing a PGP key.