[Users] [Bug 4404] New: Web Key Directory (WKD)

[noreply at thewildbeast.co.uk]

https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4404

            Bug ID: 4404
           Summary: Web Key Directory (WKD)
           Product: Claws Mail
           Version: GIT
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Plugins/Privacy/PGP
          Assignee: users at lists.claws-mail.org
          Reporter: clawsmail at ionos.gr

Hello,

The current implementation of PGP/Core & PGP/SMIME plugins, lack an important
feature that makes living with encrypted emails very easy.

The Web Key Directory (WKD) implementation has has been widely adopted, allows
for easy retrieval of public keys via HTTPS requests.

Thus, if you want to reply to an incoming encrypted email, its fairly easy to
do so, without contacting any public key servers, by using a well-defined HTTPS
URL directly to the domain of the originating email.

For example, incoming at example.tld would publish its public key at:
https://example.tld/.well-known/openpgpkey/policy/hu/<hash>

Where <hash> is the first part of the email address, hashed via SHA-1 and
encoded via Z-Base-32.

Web Key Directory (WKD) has been widely adopted and supported by various
organizations, for example Debian linux, kernel.org, protonmail, Gentoo linux,
TOR project, f-droid.org, privacytools.io and others.

Mail clients that already support WKD include Thunderbird, KMail, GpgOL for
Outlook and Mailvelope.

Thank you.


References:
https://wiki.gnupg.org/WKD
https://www.uriports.com/blog/setting-up-openpgp-web-key-directory/
https://bugs.archlinux.org/task/63171
https://dkg.fifthhorseman.net/blog/wkd-for-debian.org.html

-- 
You are receiving this mail because:
You are the assignee for the bug.