>>106279752
PGP is encryption and signing / verification.
Anonymity is a separate subject, just how the transfer is separate.
And that is what makes PGP good. That makes it work for 34 years and counting.
A forum on Tor limits your communication to that forum. How do you know that two posts on that forum are done by the same person? How do you know that the package you receive in mail is from that person? How do you know whether or not the person who communicates with you in any other form is the same person?
How do you encrypt a message on that forum to make sure that only a single target person can read it?
You don't. Except if you write a PGP signed message on that forum.
I could sign this post with a pgp key, then send you something in mail with a letter with a pgp signed text on it and you could verify that i was the sender, without knowing my real identity, but knowing that the same person sending the package is the same that wrote this message to you.
Unless i write the address of the sender on it, then i am of course not anonymous.
I could write software and publish it on any shady gitea instance and sign my commits with my PGP key and you know its written by me.
Merging transport, anonymity, encryption and verification into one big glowing package is the biggest privacy blunder of the decade.
