3 ms·
> I would prefer if you could just dump the whole key in DNS itself, but TXT records are limited to 255 bytes. The article you've linked also mentions CERT RRs
by defanor 6y ago
> I would prefer if you could just dump the whole key in DNS itself, but TXT records are limited to 255 bytes.
The article you've linked also mentions CERT RRs, which include keys themselves, and there's also DANE's OPENPGPKEY [1].
Besides, each string of a TXT record is limited, but they can consist of multiple strings, so whole keys can be stored in those as well (as it's done for DKIM records, for instance).
[1] https://tools.ietf.org/html/rfc7929 https://tools.ietf.org/html/rfc7929
- Boulth6 6y agoI'd rather advise to use Web Key Directory that is trivial to setup (have https and put a key file in one special location). WKD is also widely supported by OpenPGP software (including ProtonMail, GnuPG, OpenKeychain). See: https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-service/ https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-s...