wks for sign-only keys

Werner Koch wk at gnupg.org
Fri Jan 11 09:40:55 CET 2019


On Wed,  9 Jan 2019 11:55, gnupg at eckner.net said:

> it can't with the sign-only key. However, would it be possible to fall
> back to an unencrypted email for keys which are not suited for
> encrypting? In the end, the content will still be signed, thus authentic.

The purpose of the Web Key Directory is to provide an encryption key for
a given mail address.  It is entirely useless for a signing key because
a verifying party can't find the key using the Web Key directory because
the lookup is by the mail address and not by the fingerprint, which is
provided as part of the signature.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20190111/37c9bc68/attachment.sig>


More information about the Gnupg-devel mailing list