4 ms·
keys.openpgp.org operator here. It's definitely not a bug, we do not publish email addresses without verification. From our perspective, op verified their email
by Valodim 3y ago
keys.openpgp.org operator here. It's definitely not a bug, we do not publish email addresses without verification. From our perspective, op verified their email and made the key discoverable.
- PaulDavisThe1st 3y agoSo that implies that either the OP has forgotten that they did this (because they are quite clear that they did not), or that there is a way to do this without being the owner of the email address. Both worrying, but one is a lot more worrying than the other.
- Valodim 3y agoI don't think they are clear they did not? In fact, they are clear that they did publish their key, because they mention depublishing it to test their hypothesis. The part they say they didn't opt into was that Proton (or any specific email client) would use the key by default.
- PaulDavisThe1st 3y agoIndeed, you are correct, and I was wrong.