Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Should I put my public key on my website so that people can securely contact me. I have seen personal sites where there public key is at the bottom of the page such as this site by the computer scientist Peter Gutmann.

  1. How should i include the key in my page?
  2. Is there a standardized way to include the key?

Many sites include them at the bottom of the page

share|improve this question

closed as primarily opinion-based by Adnan, Xander, Terry Chia, Rory Alsop Aug 3 '13 at 17:56

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

    
As Thomas has said, do what you like with them:-) Closed as this isn't really a security question but an opinion question. –  Rory Alsop Aug 3 '13 at 17:57

1 Answer 1

PGP public keys can be published anywhere because they are signed and you shall not use a key which you have not verified to be correct, either by checking its thumbprint with the key owner (over a secure medium, e.g. when meeting in person) or through its signature (PGP keys are signed; this is the "web of trust").

There is no standard for putting the key in a Web page, just a tradition, and it is not meant for automatic tools. This is for humans. You read the page and you use your brain.

PGP key servers are a more streamlined way to distribute PGP keys -- precisely because such key servers are supported by automatic tools (e.g. integration with client software, search engines..).

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.