The web-of-trust code that is currently inside org.subshare.core and has been offered to the BC team as pull request bcgit/bc-java#119 should be extracted into a separate repository+project.

Why? The pull request was not (yet?) accepted by BC and by now, I need the web-of-trust in another project, outside of subshare => a separate library is thus needed.

As pointed out by bcgit in bcgit/bc-java#119 it is indeed not a good idea to directly use java.io.File. We should introduce an abstraction layer making it possible to use other implementations -- e.g. reading/writing from/to a database or simply memory.

subshare currently uses BouncyCastle 1.52. But the newest version is 1.56 (since 2016-12-23). We should thus switch to the newest version.

...see sister-issue: subshare/subshare#48

There's the new BouncyCastle 1.59 -- adapt and build appropriate release of bc-pgp-wot.