I do it primarily within my network. It's mostly based on the trust I've built over the years in the online and local communities. I used @Bisq in the past.