diff --git a/src/slides.md b/src/slides.md
index d547a65..17e21a3 100644
--- a/src/slides.md
+++ b/src/slides.md
@@ -360,11 +360,179 @@ Risultato: giugno 2021 [**sks-keyservers.net shutdown**](https://lists.nongnu.or
nslookup __${hex(sha256("alice"))}__._openpgpkey.__openpgp.example__.
- LDAP, Keybase, Autocrypt, ...
+---
+
+# Keystore a confronto
+
+
+
+
+ Property |
+ General Purpose Keyservers |
+ Domain-restricted Keyservers |
+ Non-Keyserver Keystores |
+
+
+ Hockeypuck |
+ Hagrid |
+ Onak |
+ Mailvelope |
+ Proton |
+ WKD |
+ LDAP |
+ Keybase |
+
+
+
+
+ Decentralisation |
+ Yes1 |
+ No |
+ Yes2 |
+ No |
+ No |
+ Yes3 |
+ No |
+ No |
+
+
+ Generality |
+ Yes |
+ Yes |
+ Yes |
+ No |
+ No |
+ No |
+ No |
+ Yes |
+
+
+ UID verification |
+ No |
+ Yes |
+ No |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ No |
+
+
+ Non-email UIDs |
+ Yes |
+ No |
+ Yes |
+ No |
+ No |
+ No |
+ Yes |
+ Yes |
+
+
+ UID search |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes(?) |
+
+
+ Fingerprint search |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ No |
+ Yes |
+ No |
+
+
+ Certifications |
+ Yes |
+ Limited |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+
+
+ Self-sovereignty |
+ In progress |
+ Limited |
+ No |
+ Yes(?) |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+
+
+ Key deletion |
+ Yes |
+ Yes |
+ Yes(?) |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+ Yes |
+
+
+ HKP API |
+ Yes |
+ Yes |
+ Yes |
+ Limited |
+ Limited |
+ No |
+ No |
+ No |
+
+
+
+
+_1By syncronization 2By forwarding 3By delegation_
+
+Fonte: Andrew Gallagher, [_The State of the Keyservers in 2024_](https://blog.pgpkeys.eu/state-keyservers-2024.html) (gennaio 2024)
---
-# TODO
+
+# Keystore a confronto
+
+| | autocrypt | attachment | embedded certificate subpacket | URL header | HKP over email | HKPS | WKD | DANE | Tor OHTTP+HKP |
+| ------------------------------ | --------- | ----------- | ------------------------------ | ---------- | ---------------- | ----------- | ----------- | ------------- | ------------- |
+| transport method | inband | inband | inband | inband | inband | out of band | out of band | out of band | out of band |
+| no leakage | ✓ | ✓ | ✓ | | | | | | ✓ |
+| constrained network | ✓ | ✓ | ✓ | | ✓ | | | | |
+| no SPOF | ✓ | ✓ | ✓ | | ✓ | ? | ✓ | ✓ | ? |
+| zero roundtrip | ? | | | | ✓ | ✓ | ✓ | ✓ | ✓ |
+| independent of domain operator | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | | ✓ |
+| freshness | | | | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
+| freshness for opt out | ? | | | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
+| easy delegation | | | | | | | ? | ✓ | |
+| integrity in transit | | ✓ (if DKIM) | ✓ (if DKIM) | | ✓ (if DKIM) | ✓ | ✓ | ✓ (if DNSSEC) | ✓ |
+| minimal work for user | ✓ | | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
+
+Fonte: [_Minutes of the 8th OpenPGP Email Summit_](https://www.openpgp.org/community/email-summit/2024/minutes/) (giugno 2024)
-todo
---