3 ms·
> There are also efforts like DANE to put it in DNS. It seems GnuPG and "the ecosystem" is slowly moving to WKD (Web Key Directory) as it is easier to deploy (
by Leace 8y ago
> There are also efforts like DANE to put it in DNS.
It seems GnuPG and "the ecosystem" is slowly moving to WKD (Web Key Directory) as it is easier to deploy (e.g. kernel.org is using it).
If you put your binary key (gpg --export 36C8AAA9) at https://lrvick.net/.well-known/openpgpkey/hu/gfoh5t79df9raqtiz8f6gsg8urexr9wo https://lrvick.net/.well-known/openpgpkey/hu/gfoh5t79df9raqt... tools would retrieve it automatically when using your e-mail address (gpg --locate-key $EMAIL). (I got the hash by running gpg -k --with-wkd 36C8AAA9).
This is supported by GnuPG, OpenKeychain and some e-mail clients: Enigmail, GpgOL (Outlook) would fetch your key in background when someone is writing an e-mail.
For details see: https://wiki.gnupg.org/WKD#Implementations https://wiki.gnupg.org/WKD#Implementations
The spec: https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-service/ https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-s...