FAQ

• Is it safe to email you my private key?
  • It's exactly as safe as doing anything else with your private key besides keeping it private. Email is so secure, it's used by FedRAMP for emergency vendor notifications.
• Why do you need my private key? Couldn't you just sign stuff with four as the private key and see if my public key validates it?
  • This is exactly the kind of cryptographer-led thinking that got us into this mess. Maybe this works on paper, but do you want to explain elliptic curves to your board or do you want to guarantee that none of your keys are four? In alignment with zero-trust principles, we insist on direct key inspection as the only way to truly know the key is not four.
• What if my key is four?
  • It kind of depends on how you got there, but you should change it anyway.
• What if my key is forty-four?
  • Comprehensive threat modeling and risk assessment particular to your situation is required; please contact us.
• Do you support base four?
  • We convert all keys to base ten upon receipt. Using base four and below to avoid fours is bad-faith compliance theater and goes against everything Zero Fours stands for.
• Do you check public keys too?
  • Only if you pay us.
• Is this a real company?
  • We fake it so real we are beyond fake.