<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 09.12.2018 20:48, Stefan Claas
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20181209204838.16128a68@iria.my-fqdn.de">
<pre class="moz-quote-pre" wrap="">Mind you in the 90's PGP key servers accepted also email and Usenet
submissions, if i remember correctly. The keyword was then simple
the word "add" in the subject line of an email.
<a class="moz-txt-link-rfc2396E" href="https://www.rubin.ch/pgp/sendkey.en.html" moz-do-not-send="true"><https://www.rubin.ch/pgp/sendkey.en.html></a></pre>
</blockquote>
<p>That's an interesting idea, it seems GnuPG has some support for
sending keys via e-mail.</p>
<p>From the "--keyserver" option documentation [0]:</p>
<p>
<blockquote type="cite">This is the server that
<samp>--receive-keys</samp>, <samp>--send-keys</samp>, and <samp>--search-keys</samp>
will communicate with to receive keys from, send keys to, and
search for
keys on. (...) The scheme is the type of keyserver:
"hkp" for the HTTP (or compatible) keyservers, "ldap" for the
LDAP
keyservers, or *"mailto" for the Graff email keyserver*. </blockquote>
I didn't manage to get it running though ("gpg: keyserver send
failed: No keyserver available"), probably it depends on some
package that I don't have locally.</p>
<p>By the way validation of keys sent from e-mail would require DKIM
as it's easy to spoof "From" (that's why most solutions send
verification e-mails to the e-mail address instead of receiving
it).</p>
<p>Kind regards,</p>
<p>Wiktor</p>
<p>[0]:
<a class="moz-txt-link-freetext" href="https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html">https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html</a><br>
</p>
<pre class="moz-signature" cols="80">--
<a class="moz-txt-link-freetext" href="https://metacode.biz/@wiktor">https://metacode.biz/@wiktor</a></pre>
</body>
</html>