WKD new online-checker and suggestion for the WKD spec

[Bernhard Reiter]

Hi,

there is a new online checker by Freddie Leeman

  https://webkeydirectory.com

The source code is not public and in a test I've found out that
the SHOULD content-type is indicated in red, but I've also learned
that my policy file had a defect. So it is useful. :)

As long as your email address is public anyway... happy checking! 

@Werner,

the checker also recommends to set
  The Access-Control-Allow-Origin: * header is needed to allow OpenPGP clients 
  to fetch the policy from a different domain, bypassing CORS restrictions.

sounds like a good idea to me, to support clients running as webpage.
Shouldn't this be added to the WKD specification?

(I've suggested it already in Message-Id: 
<201806051641.34344.bernhard at intevation.de> I believe). :)

Best,
Bernhard

-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250219/2adf6fcb/attachment-0001.sig>