http://hiddenwep33eg4w225lcdwcez4iefacwpiia6cwg7pfmcz4hvijzbgid.onion/index.php?title=GNU_Privacy_Guard&mobileaction=toggle_view_desktop
Unlike the familiar Certificate Authority system used for TLS and S/MIME, PGP uses a web of trust. People meet each other to verify public key signatures, often at "key signing parties", and then sign public keys (using their private keys). Some people choose to upload their public key, with others' signatures, to "key servers", which help to automate the process of exchanging keys.