[mailop] OpenPGP WKD URL

Werner Koch wk at gnupg.org
Tue Feb 11 13:28:39 CET 2025


On Mon,  3 Feb 2025 12:44, Klaus Ethgen said:

> First of all, I did the easiest way in DNS:
> openpgpkey  IN  CNAME   wkd.keys.openpgp.org.

CNAME will only work if the final webserver has a certificate for the
actual domain or the one with the "openpgpkey." prefix.  Thus I don't
understand how Vincent's hack can work without delegating the ownership
of one's own domain to his server.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250211/65dafdad/attachment.sig>


More information about the Gnupg-users mailing list