WKD
From Gentoo Wiki
Jump to:navigation
Jump to:search
Web Key Directory (WKD) is one of mechanisms for distributing GnuPG keys. WKD works by querying a .well-known directory on a domain, extracted from an email address, and obtains the keys from there. It avoids reliance on a centralized keyserver.
Use in Gentoo
Gemato, which is used for repository verification by Portage, uses WKD as one method for refreshing keys safely.
Using Web Key Directory on gentoo.org
The public key from each Gentoo developer can be fetched via the command line:
user $gpg --auto-key-locate clear,nodefault,wkd --locate-keys [devname]@gentoo.orgSee also
- GnuPG — a free implementation of the OpenPGP standard (RFC 4880).
External resources
- Test WKD providers online https://metacode.biz/openpgp/web-key-directory
- https://wiki.gnupg.org/WKD
- https://www.gentoo.org/news/2019/07/03/sks-key-poisoning.html
- Draft of the IETF WKS standard https://datatracker.ietf.org/doc/html/draft-koch-openpgp-webkey-service-10
- eix-sync: Refreshing keys via WKD always fails
Retrieved from "https://wiki.gentoo.org/index.php?title=WKD&oldid=1422641"