4 ms·
I store the fingerprint and URL to fetch my public PGP key in a DNSSEC protected DNS record. It's called PKA: mike@blob:~$ dig +short txt mike.cardwell._pka.
by mike-cardwell 12y ago
I store the fingerprint and URL to fetch my public PGP key in a DNSSEC protected DNS record. It's called PKA:
mike@blob:~$ dig +short txt mike.cardwell._pka.grepular.com
"v=pka1\;fpr=35BCAF1D3AA21F843DC3B0CF70A5F5120018461F\;
uri=http://grepular.com/0018461F.pub.asc"
mike@blob:~$
My HN profile is GnuPG signed. You can automatically fetch my key using my PKA record and verify it by running it through the following command:
sed 's/^[ ]*//'|gpg --verify-options pka-lookups --keyserver-options \
auto-key-retrieve --verify