48 minutes ago · Tech · hide

My prior post on Sequioa PGP didn't mention setting up a Web Key Directory (WKD) because I briefly read through the details and thought it might be a pain to set up. Turns out, it's quite easy. Not only that, it's probably the preferred option for custom domains. Let's talk about it. What is WKD? A Web Key Directory is a directory on your web server that points to the various public keys associated with your PGP email addresses. Why is this useful? Let's recap how asymmetric cryptography works. Alice wants to send an encrypted message to Bob. Alice uses Bob's public key to encrypt the message. The ciphertext is sent over to Bob, who then uses his private key to decrypt Alice's message into plaintext. There's one major difficult question underlying this exchange. How does Alice obtain Bob's public key? Save for Bob handing Alice his public key by hand, the PGP solution has been to upload your public key onto a keyserver. Before the keyserver accepts the public key, it verifies that the…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town