News for hackers. Stuff that matters.

A comment on An incomplete guide to stealth addresses. Parent comment

Re:An incomplete guide to stealth addresses by westurner on Monday January 23, 2023 @08:38PM (#34497913)
Oh, there's WKD: Web Key Directory https://wiki.gnupg.org/WKD#How_does_an_email_client_use_WKD....

  gpg --homedir "$(mktemp -d)" --verbose --locate-keys [email protected]

  https://example.org/.well-known/openpgpkey/hu/0t5sewh54rxz33fwmr8u6dy4bbz8itz2
Is there a pinned certificate for `gpg recv-keys` (that isn't possible with WKD) https://en.wikipedia.org/wiki/Key_server_(cryptographic)#Pro... ?

This depends upon TLS and preshared CA certs in all forms AFAIU:

  gpg --recv-keys [email protected]
W3C DIDs are encodable into QR codes, too. And key hierarchy is optional with DIDs.
[ Parent | on HN ]

There are no comments on this comment yet.