If you're technical, I have published an interactive write-up on how it works: keytrace.dev/blog/how-key...
All based on simple, traditional cryptography and web standards.
keytrace.dev
A technical write-up of how the parts of Keytrace come together to validate account claims, and allow third-parties to trust our validations without verifying every claim themselves