From bernhard at intevation.de Tue Jan 31 16:36:21 2023 From: bernhard at intevation.de (Bernhard Reiter) Date: Tue, 31 Jan 2023 16:36:21 +0100 Subject: keyserver.gnupg.org funded by GnuPG e. Verein Message-ID: <202301311636.21685.bernhard@intevation.de> Hello friends of GnuPG and OpenPGP, over the course of last year our association ("Verein" in German) has funded the setup and running of a server for public OpenPGP keys. It is running since a few months now at: https://keyserver2.gnupg.org/ (It's in beta, there will be some adjustments to the texts.) How it came to be: Werner suggested two young admins, and I handled the details. The server is operated independently from the Verein: e.g. the board does not have any access to the machines. I estimate the costs for the verein between 1000 and 2000?, maybe a little bit more, once we get more load on the system. Technically the admin told me, they can scale the system up, if needed. Once the texts on the server are improved, we shall announce the server as a result of our activity. A draft is below, is it fine as is? (Send detailed feedback to me directly.) Regards Bernhard == Announcement Draft [To be send to gnupg-users@, also via microblogging channels. Website or blog?] Hello friends of privacy and decentral communication! When public-key cryptography came up, it was a major step towards privacy in electronic communication. To work well though, someone needs to have the public keys of the ones we want to mail with. Keyservers have offered a decentral way to discover these "pubkeys" and for about two decades network of SKS-Keyserver sites was a backbone of using the OpenPGP standard as implemented by GnuPG and others. Until about a few years ago the deployments got into trouble. A new implementation called hockeypuck currently offers the best network of new keyservers. The GnuPG Verein joins this effort by funding one of these, available at: https://keyserver2.gnupg.org/ The server is operated independently from the Verein. Like all new keyservers, it does not carry third party signatures. (To reenable this feature, more software development is needed.) Even with new methods to distribute pubkeys like WKD, keyserver are still useful for some situations, for example when there is no email address associated with a key and it shall be revoked independently from a single service provider. So we happy to announce the new keyserver joining the _new_ SKS keyserver newwork https://pgpkeys.eu/. Best Regards, Bernhard (Vice-Chair of GnuPG e.V.) https://gnupg.org/verein/ GnuPG e.V. is a charitable legal person (a German ?Verein?) to improve data protection, data sovereignty and customer protection in in our supranational networked society. -- https://intevation.de/~bernhard ? +49 541 33 508 3-3 Intevation GmbH, Osnabr?ck, DE; Amtsgericht Osnabr?ck, HRB 18998 Gesch?ftsf?hrer Frank Koormann, Bernhard Reiter -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 659 bytes Desc: This is a digitally signed message part. URL: