Web Key Directory: refreshing keys
wiktor at metacode.biz
Mon Jun 25 13:03:45 CEST 2018
I would like to ask about the potential ability to refresh keys using
Web Key Directory protocol.
As far as I know WKD can be used to locate keys (via --locate-key et al.
and when verifying signatures with signer's UID embedded) but the keys
retrieved via WKD are refreshed using keyservers only, never their
Technically that would be possible (as the key origin is preserved).
The disadvantage would be that WKD server operator would see when people
refresh keys within their domain.
I see also some advantages: there are less bytes to download (because
binary, and because keyservers allow anyone to bloat the keys  )
and that it could allow managing keys without keyservers at all  (for
example in case of a hypothetical GDPR-apocalypse).
Would refresh via WKD be a good idea?
Thanks for your input!
: Of course someone else can put the keys in keyservers anyway but I
mean providing authoritative key updates on WKD host.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the Gnupg-devel