#webkeydirectory — Public Fediverse posts

RE: https://infosec.exchange/@pgpkeys/116524105050914478

@pgpkeys

thanks for the update! So what does that mean for people running WKD's with existing keys? What changes do we need to make?

#WKD #WebKeyDirectory #PGP #PGPPQC #PQC

RE: https://infosec.exchange/@pgpkeys/116524105050914478

@pgpkeys

thanks for the update! So what does that mean for people running WKD's with existing keys? What changes do we need to make?

#WKD #WebKeyDirectory #PGP #PGPPQC #PQC

RE: https://infosec.exchange/@pgpkeys/116524105050914478

@pgpkeys

thanks for the update! So what does that mean for people running WKD's with existing keys? What changes do we need to make?

#WKD #WebKeyDirectory #PGP #PGPPQC #PQC

RE: https://infosec.exchange/@pgpkeys/116524105050914478

@pgpkeys

thanks for the update! So what does that mean for people running WKD's with existing keys? What changes do we need to make?

#WKD #WebKeyDirectory #PGP #PGPPQC #PQC

RE: https://infosec.exchange/@pgpkeys/116524105050914478

@pgpkeys

thanks for the update! So what does that mean for people running WKD's with existing keys? What changes do we need to make?

#WKD #WebKeyDirectory #PGP #PGPPQC #PQC

guys, please make Email and the Web a safer place and implement WKD - Web Key Directory, if you use PGP anyway. It does not take much time and if you already have a website or server, you can just plunk it on there.

Implementation:
https://www.nicfab.eu/en/posts/wkd2/

Verification:
https://miarecki.eu/tools/wkd-checker/

https://www.webkeydirectory.com/

#SouthAfrica #Email #Security #PGP #WebKeyDirectory #WKD

guys, please make Email and the Web a safer place and implement WKD - Web Key Directory, if you use PGP anyway. It does not take much time and if you already have a website or server, you can just plunk it on there.

Implementation:
https://www.nicfab.eu/en/posts/wkd2/

Verification:
https://miarecki.eu/tools/wkd-checker/

https://www.webkeydirectory.com/

#SouthAfrica #Email #Security #PGP #WebKeyDirectory #WKD

guys, please make Email and the Web a safer place and implement WKD - Web Key Directory, if you use PGP anyway. It does not take much time and if you already have a website or server, you can just plunk it on there.

Implementation:
https://www.nicfab.eu/en/posts/wkd2/

Verification:
https://miarecki.eu/tools/wkd-checker/

https://www.webkeydirectory.com/

#SouthAfrica #Email #Security #PGP #WebKeyDirectory #WKD

He leído por aquí varias veces que el cifrado de #Proton Mail solo funciona con Proton y NO es cierto:

- Proton utiliza #WebKeyDirectory para intentar localizar la clave pública del destinatario. (https://wiki.gnupg.org/WKD). De forma resumida: #WKD comprueba el dominio del destinatario por si tiene una web y esta tiene un directorio ".well-known/openpgpkey".

-- Si encuentra una clave pública que tenga la dirección de correo del destinatario asociada con su identidad, cifra el correo con ella.

- Si tienes un dominio propio pero no apunta a ninguna web, puedes apuntar al servidor de claves públicas de #OpenPGP.
(consulta "wkd as a service" https://keys.openpgp.org/about/usage/).

- Y sí, esto también funciona si usas un cliente de correo electrónico compatible con AutoCrypt. (Mozilla Thunderbird, FairEmail…).

Por estas cosas, pese a que Proton obviamente ha abusado del marketing, voy a seguir recomendándolo al público general.

#PGP

He leído por aquí varias veces que el cifrado de #Proton Mail solo funciona con Proton y NO es cierto:

- Proton utiliza #WebKeyDirectory para intentar localizar la clave pública del destinatario. (https://wiki.gnupg.org/WKD). De forma resumida: #WKD comprueba el dominio del destinatario por si tiene una web y esta tiene un directorio ".well-known/openpgpkey".

-- Si encuentra una clave pública que tenga la dirección de correo del destinatario asociada con su identidad, cifra el correo con ella.

- Si tienes un dominio propio pero no apunta a ninguna web, puedes apuntar al servidor de claves públicas de #OpenPGP.
(consulta "wkd as a service" https://keys.openpgp.org/about/usage/).

- Y sí, esto también funciona si usas un cliente de correo electrónico compatible con AutoCrypt. (Mozilla Thunderbird, FairEmail…).

Por estas cosas, pese a que Proton obviamente ha abusado del marketing, voy a seguir recomendándolo al público general.

#PGP

He leído por aquí varias veces que el cifrado de #Proton Mail solo funciona con Proton y NO es cierto:

- Proton utiliza #WebKeyDirectory para intentar localizar la clave pública del destinatario. (https://wiki.gnupg.org/WKD). De forma resumida: #WKD comprueba el dominio del destinatario por si tiene una web y esta tiene un directorio ".well-known/openpgpkey".

-- Si encuentra una clave pública que tenga la dirección de correo del destinatario asociada con su identidad, cifra el correo con ella.

- Si tienes un dominio propio pero no apunta a ninguna web, puedes apuntar al servidor de claves públicas de #OpenPGP.
(consulta "wkd as a service" https://keys.openpgp.org/about/usage/).

- Y sí, esto también funciona si usas un cliente de correo electrónico compatible con AutoCrypt. (Mozilla Thunderbird, FairEmail…).

Por estas cosas, pese a que Proton obviamente ha abusado del marketing, voy a seguir recomendándolo al público general.

#PGP

He leído por aquí varias veces que el cifrado de #Proton Mail solo funciona con Proton y NO es cierto:

- Proton utiliza #WebKeyDirectory para intentar localizar la clave pública del destinatario. (https://wiki.gnupg.org/WKD). De forma resumida: #WKD comprueba el dominio del destinatario por si tiene una web y esta tiene un directorio ".well-known/openpgpkey".

-- Si encuentra una clave pública que tenga la dirección de correo del destinatario asociada con su identidad, cifra el correo con ella.

- Si tienes un dominio propio pero no apunta a ninguna web, puedes apuntar al servidor de claves públicas de #OpenPGP.
(consulta "wkd as a service" https://keys.openpgp.org/about/usage/).

- Y sí, esto también funciona si usas un cliente de correo electrónico compatible con AutoCrypt. (Mozilla Thunderbird, FairEmail…).

Por estas cosas, pese a que Proton obviamente ha abusado del marketing, voy a seguir recomendándolo al público general.

#PGP

He leído por aquí varias veces que el cifrado de #Proton Mail solo funciona con Proton y NO es cierto:

- Proton utiliza #WebKeyDirectory para intentar localizar la clave pública del destinatario. (https://wiki.gnupg.org/WKD). De forma resumida: #WKD comprueba el dominio del destinatario por si tiene una web y esta tiene un directorio ".well-known/openpgpkey".

-- Si encuentra una clave pública que tenga la dirección de correo del destinatario asociada con su identidad, cifra el correo con ella.

- Si tienes un dominio propio pero no apunta a ninguna web, puedes apuntar al servidor de claves públicas de #OpenPGP.
(consulta "wkd as a service" https://keys.openpgp.org/about/usage/).

- Y sí, esto también funciona si usas un cliente de correo electrónico compatible con AutoCrypt. (Mozilla Thunderbird, FairEmail…).

Por estas cosas, pese a que Proton obviamente ha abusado del marketing, voy a seguir recomendándolo al público general.

#PGP

#PGPainless Ecosystem Release Marathon

✅ PGPainless 2.0.0
✅ SOP-Java 14.0.1
✅ Cert-D-Java 0.2.3
✅ Cert-D-PGPainless 0.2.3
✅ WKD-Java 0.1.3
✅ VKS-Java 0.1.4

#OpenPGP #WebKeyDirectory #KeyServer

#PGPainless Ecosystem Release Marathon

✅ PGPainless 2.0.0
✅ SOP-Java 14.0.1
✅ Cert-D-Java 0.2.3
✅ Cert-D-PGPainless 0.2.3
✅ WKD-Java 0.1.3
✅ VKS-Java 0.1.4

#OpenPGP #WebKeyDirectory #KeyServer

#PGPainless Ecosystem Release Marathon

✅ PGPainless 2.0.0
✅ SOP-Java 14.0.1
✅ Cert-D-Java 0.2.3
✅ Cert-D-PGPainless 0.2.3
✅ WKD-Java 0.1.3
✅ VKS-Java 0.1.4

#OpenPGP #WebKeyDirectory #KeyServer

#PGPainless Ecosystem Release Marathon

✅ PGPainless 2.0.0
✅ SOP-Java 14.0.1
✅ Cert-D-Java 0.2.3
✅ Cert-D-PGPainless 0.2.3
✅ WKD-Java 0.1.3
✅ VKS-Java 0.1.4

#OpenPGP #WebKeyDirectory #KeyServer

@nicfab

@yunohost
@nextcloud (Mail)
@freedomboxfndn

Are / will you support this option for encrypted email? (^^^ Previous toot)

#Encryption #Email #WKD #Privacy #Yunohost #Nextcloud #Freedombox #WebKeyDirectory #Cryptography #OpenPGP

@nicfab

@yunohost
@nextcloud (Mail)
@freedomboxfndn

Are / will you support this option for encrypted email? (^^^ Previous toot)

#Encryption #Email #WKD #Privacy #Yunohost #Nextcloud #Freedombox #WebKeyDirectory #Cryptography #OpenPGP

@nicfab

@yunohost
@nextcloud (Mail)
@freedomboxfndn

Are / will you support this option for encrypted email? (^^^ Previous toot)

#Encryption #Email #WKD #Privacy #Yunohost #Nextcloud #Freedombox #WebKeyDirectory #Cryptography #OpenPGP

@nicfab

@yunohost
@nextcloud (Mail)
@freedomboxfndn

Are / will you support this option for encrypted email? (^^^ Previous toot)

#Encryption #Email #WKD #Privacy #Yunohost #Nextcloud #Freedombox #WebKeyDirectory #Cryptography #OpenPGP

@nicfab

@yunohost
@nextcloud (Mail)
@freedomboxfndn

Are / will you support this option for encrypted email? (^^^ Previous toot)

#Encryption #Email #WKD #Privacy #Yunohost #Nextcloud #Freedombox #WebKeyDirectory #Cryptography #OpenPGP

🔐 Every unencrypted email is readable by 10+ entities and stored forever.

Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.

WKD makes encrypted email as simple as HTTPS made web browsing secure.

https://www.nicfab.eu/en/posts/wkd2/

#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP

🔐 Every unencrypted email is readable by 10+ entities and stored forever.

Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.

WKD makes encrypted email as simple as HTTPS made web browsing secure.

https://www.nicfab.eu/en/posts/wkd2/

#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP

🔐 Every unencrypted email is readable by 10+ entities and stored forever.

Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.

WKD makes encrypted email as simple as HTTPS made web browsing secure.

https://www.nicfab.eu/en/posts/wkd2/

#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP

🔐 Every unencrypted email is readable by 10+ entities and stored forever.

Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.

WKD makes encrypted email as simple as HTTPS made web browsing secure.

https://www.nicfab.eu/en/posts/wkd2/

#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP

🔐 Every unencrypted email is readable by 10+ entities and stored forever.

Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.

WKD makes encrypted email as simple as HTTPS made web browsing secure.

https://www.nicfab.eu/en/posts/wkd2/

#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP

Möchte man heutzutage eigentlich noch ein #WebKeyDirectory auf der eigenen #Mail #Domain einrichten?

#PgP #EMail #WKD

Möchte man heutzutage eigentlich noch ein #WebKeyDirectory auf der eigenen #Mail #Domain einrichten?

#PgP #EMail #WKD

Möchte man heutzutage eigentlich noch ein #WebKeyDirectory auf der eigenen #Mail #Domain einrichten?

#PgP #EMail #WKD

Möchte man heutzutage eigentlich noch ein #WebKeyDirectory auf der eigenen #Mail #Domain einrichten?

#PgP #EMail #WKD

Im letzten Teil unserer dreiteiligen #Podcast Serie vom letzten Hackcamp im April geht es um #Mobilizon, #WebKeyDirectory, die #FOSSGIS Konferenz und #Leaflet.
https://podcast.netzbegruenung.de/podcast/hackcamp-2024-teil-3/

Im letzten Teil unserer dreiteiligen #Podcast Serie vom letzten Hackcamp im April geht es um #Mobilizon, #WebKeyDirectory, die #FOSSGIS Konferenz und #Leaflet.
https://podcast.netzbegruenung.de/podcast/hackcamp-2024-teil-3/

Im letzten Teil unserer dreiteiligen #Podcast Serie vom letzten Hackcamp im April geht es um #Mobilizon, #WebKeyDirectory, die #FOSSGIS Konferenz und #Leaflet.
https://podcast.netzbegruenung.de/podcast/hackcamp-2024-teil-3/

Im letzten Teil unserer dreiteiligen #Podcast Serie vom letzten Hackcamp im April geht es um #Mobilizon, #WebKeyDirectory, die #FOSSGIS Konferenz und #Leaflet.
https://podcast.netzbegruenung.de/podcast/hackcamp-2024-teil-3/

Im letzten Teil unserer dreiteiligen #Podcast Serie vom letzten Hackcamp im April geht es um #Mobilizon, #WebKeyDirectory, die #FOSSGIS Konferenz und #Leaflet.
https://podcast.netzbegruenung.de/podcast/hackcamp-2024-teil-3/

Ma le vostre chiavi pubbliche GPG le pubblicate ? Me ne stavo sereno con la pubblicazione sui keyserver ma no, pare che oggi bisogna usare WKD e niente, e' tutto il giorno che ci litigo.

Mi sono loggato qui solo per dire MANNAGGIA !

#gpgkey #WebKeyDirectory

Another set of sshd-openpgp-auth and ssh-openpgp-auth releases is out:
This server and client-side tooling for managing the #authentication of #SSH host keys with the help of an #OpenPGP #certificate as trust anchor is now feature complete.
https://crates.io/crates/sshd-openpgp-auth
https://crates.io/crates/ssh-openpgp-auth
Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!
#DNS #KeyOxide #KnownHosts #OpenSSH #PGPKI #Rust #Rustlang #Software #SSH #WebKeyDirectory #WebOfTrust #WKD #WoT

Another set of sshd-openpgp-auth and ssh-openpgp-auth releases is out:
This server and client-side tooling for managing the #authentication of #SSH host keys with the help of an #OpenPGP #certificate as trust anchor is now feature complete.
https://crates.io/crates/sshd-openpgp-auth
https://crates.io/crates/ssh-openpgp-auth
Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!
#DNS #KeyOxide #KnownHosts #OpenSSH #PGPKI #Rust #Rustlang #Software #SSH #WebKeyDirectory #WebOfTrust #WKD #WoT

Another set of sshd-openpgp-auth and ssh-openpgp-auth releases is out:
This server and client-side tooling for managing the #authentication of #SSH host keys with the help of an #OpenPGP #certificate as trust anchor is now feature complete.
https://crates.io/crates/sshd-openpgp-auth
https://crates.io/crates/ssh-openpgp-auth
Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!
#DNS #KeyOxide #KnownHosts #OpenSSH #PGPKI #Rust #Rustlang #Software #SSH #WebKeyDirectory #WebOfTrust #WKD #WoT

Another set of sshd-openpgp-auth and ssh-openpgp-auth releases is out:
This server and client-side tooling for managing the #authentication of #SSH host keys with the help of an #OpenPGP #certificate as trust anchor is now feature complete.
https://crates.io/crates/sshd-openpgp-auth
https://crates.io/crates/ssh-openpgp-auth
Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!
#DNS #KeyOxide #KnownHosts #OpenSSH #PGPKI #Rust #Rustlang #Software #SSH #WebKeyDirectory #WebOfTrust #WKD #WoT

Another set of sshd-openpgp-auth and ssh-openpgp-auth releases is out:
This server and client-side tooling for managing the #authentication of #SSH host keys with the help of an #OpenPGP #certificate as trust anchor is now feature complete.
https://crates.io/crates/sshd-openpgp-auth
https://crates.io/crates/ssh-openpgp-auth
Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!
#DNS #KeyOxide #KnownHosts #OpenSSH #PGPKI #Rust #Rustlang #Software #SSH #WebKeyDirectory #WebOfTrust #WKD #WoT

We have just issued the first #release of #sshd-openpgp-auth and #ssh-openpgp-auth.

Using this server and client-side tooling it is possible to manage the #authentication of #SSH host keys with the help of an #OpenPGP certificate as trust anchor.

https://crates.io/crates/sshd-openpgp-auth

https://crates.io/crates/ssh-openpgp-auth

Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!

#DNS #KeyOxide #KnownHosts #OpenSSH #Rustlang #Software #WebKeyDirectory #WebOfTrust #WKD #WoT

We have just issued the first #release of #sshd-openpgp-auth and #ssh-openpgp-auth.

Using this server and client-side tooling it is possible to manage the #authentication of #SSH host keys with the help of an #OpenPGP certificate as trust anchor.

https://crates.io/crates/sshd-openpgp-auth

https://crates.io/crates/ssh-openpgp-auth

Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!

#DNS #KeyOxide #KnownHosts #OpenSSH #Rustlang #Software #WebKeyDirectory #WebOfTrust #WKD #WoT

We have just issued the first #release of #sshd-openpgp-auth and #ssh-openpgp-auth.

Using this server and client-side tooling it is possible to manage the #authentication of #SSH host keys with the help of an #OpenPGP certificate as trust anchor.

https://crates.io/crates/sshd-openpgp-auth

https://crates.io/crates/ssh-openpgp-auth

Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!

#DNS #KeyOxide #KnownHosts #OpenSSH #Rustlang #Software #WebKeyDirectory #WebOfTrust #WKD #WoT

We have just issued the first #release of #sshd-openpgp-auth and #ssh-openpgp-auth.

Using this server and client-side tooling it is possible to manage the #authentication of #SSH host keys with the help of an #OpenPGP certificate as trust anchor.

https://crates.io/crates/sshd-openpgp-auth

https://crates.io/crates/ssh-openpgp-auth

Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!

#DNS #KeyOxide #KnownHosts #OpenSSH #Rustlang #Software #WebKeyDirectory #WebOfTrust #WKD #WoT

We have just issued the first #release of #sshd-openpgp-auth and #ssh-openpgp-auth.

Using this server and client-side tooling it is possible to manage the #authentication of #SSH host keys with the help of an #OpenPGP certificate as trust anchor.

https://crates.io/crates/sshd-openpgp-auth

https://crates.io/crates/ssh-openpgp-auth

Many thanks to @wiktor for the great collaboration and #NLnet / #NGIAssure for funding this work!

#DNS #KeyOxide #KnownHosts #OpenSSH #Rustlang #Software #WebKeyDirectory #WebOfTrust #WKD #WoT

One thing I'm missing in all these guides describing how to store one's OpenPGP key in a Web Key Directory (WKD) is that for keys with lot of signatures the key best should be exported using
--export-options export-minimal

to not force an MB size download on the poor person who just wanted to write an encrypted mail.

Yes, that key then won't have the signatures, but I guess a user who uses WKD does not care about that. And if, do --refresh-keys.

#PGP #OpenPGP #GnuPG #GPG #WebKeyDirectory #WKD