Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [key-server]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
160 views

Is api encryption key vault services really secure?

I am looking for a secure (and as easy as possible) way to store my encryption key. I have been looking at some services that will hold the key for you and then you can retrieve it with an api. The ...
Hejhejhej123's user avatar
2 votes
1 answer
303 views

How does one publish UID revocations in the age of Hagrid?

I have published my gpg key on keys.openpgp.org, keyserver.ubuntu.com, and my own WKDs corresponding to each of the two email addresses on my own domains. Another user updated my public key from my ...
Murch's user avatar
  • 131
1 vote
1 answer
2k views

How hacker/ others get your SSH private key / stole your SSH private key?

I know we must keep private keys secure, but as long as we don't share the private key, what can go wrong? How hackers/others can steal/get your private key? What is the possible way that can happen ...
thegrass's user avatar
4 votes
1 answer
1k views

Can I change expiration date of a gpg key I've already sent to a key server?

ArchLinux wiki page on GnuPG reads Once a key has been submitted to a keyserver, it cannot be deleted from the server. Does that mean that also the expiration date with which I published the key via ...
Enlico's user avatar
  • 183
7 votes
1 answer
5k views

Is `gpg --refresh-keys` secure and where is this documented?

From the gpg manual: --refresh-keys Request updates from a keyserver for keys that already exist on the local keyring. This is useful for updating a key with the latest signatures, user IDs, etc. ...
Tino's user avatar
  • 221
1 vote
0 answers
849 views

Best Practices to Store Sensitive Information in Desktop Application (Electron)

I'm working in a desktop application using Electron.js with React.js and I have to store some sensitive information like API keys and database credentials. So I started digging and decided to encrypt ...
gasscoelho's user avatar
0 votes
2 answers
912 views

How to securely get a key from a key server?

In the installation procedure of Gentoo, there is a step to check signature of the downloaded iso file. To do so, we first need to download the set of keys from a key server: $ gpg --keyserver hkps://...
Pierre's user avatar
  • 133
0 votes
1 answer
404 views

keys.openpgp.org keyserver fails to send confirmation mail to an Outlook-address

I uploaded my master key's public part to the keys.openpgp.org-keyserver. It has 4 UIDs set up (4 different e-mail addresses) and each of them are correct and valid e-mail addresses. The keyserver ...
Yannik Z.'s user avatar
0 votes
1 answer
381 views

Secure and private connection to GnuPG keyservers

I wish to privately submit my public key (without it being sniffed on the internet). I found that I have 3 ways to connect to the keyserver securely: https://<keyserver-url> hkps://<...
ls_milkyway's user avatar
1 vote
1 answer
265 views

Implementing key vault and key rotation for a non-cloud application

I have a desktop application written in Python. The application is connects with an external SAP HANA service and pulls data. There are couple of configuration files where several connection string ...
RPK's user avatar
  • 195
4 votes
1 answer
630 views

Which tool/key manager to manage people's public keys in organization?

I'm not really an expert on different key types but here it goes. My company never really managed keys. We have an SKS server that was set up to manage GPG keys for a couple of users sending encrypted ...
JoeSlav's user avatar
  • 61
1 vote
0 answers
153 views

How does a GPG Keyserver deal with conflicting signatures?

Part of the web of trust of GPG is the use of Keyservers to publish/distribute versions of public keys. It's encouraged of course to sign public keys you trust so the the web may grow. How does a ...
Woodstock's user avatar
  • 689
1 vote
0 answers
112 views

How do I check if my key is updated in a keyserver after I resend it with new signatures?

I'm working in a task for class where I need to sign my public key with 3 signatures. After I got them, I need to send my key back to the keyserver with these 3 new signatures. The thing is that when ...
Adrián Jaramillo's user avatar
2 votes
1 answer
376 views

Encryption Engine vs Key Server

What is the difference (if any) between a Key Server and an Encryption Engine? Is a Key Server also the same as a Key Manager? I've seen the terms Encryption Engine, Key Server and Key Manager used ...
tattie-scone's user avatar
24 votes
1 answer
27k views

Sending the GPG key to keyserver

Today I started learning how to work with GPG keys. I successfully generated a pair for me, and imported some other keys, encrypted some files and successfully decrypted them. I want to send my GPG ...
Ionică Bizău's user avatar
1 vote
4 answers
259 views

RAID on HSM network

I want to implement a network of HSMs to secure millions of private keys. To increase fault tolerance and speed, I would want this network to run RAID 50 (striping, parity and duplication). As I ...
StormChaser's user avatar
3 votes
1 answer
7k views

How do I check who a public PGP/RSA key belongs to?

I am new to public key cryptography. I see from keyservers it's possible to do a look up for public keys associated with an email address. Is there a reverse function available to check what email/...
user1561108's user avatar
0 votes
1 answer
568 views

How to store encrypted user's data on a server, decrypt only on the client, and store the key elsewhere?

Here's what I would like to do: have a client side that generates and processes the user's data, then encrypts it and stores in a database - in order to later retrieve, decrypt and process the data ...
Dimage's user avatar
  • 1
0 votes
1 answer
226 views

Why isn't PGP used to authenticate with keyservers?

OpenPGP can be used to sign messages / authenticate. Why is this not required by keyservers to ensure that only the owner of the private key can upload / modify / remove the public key on the server? ...
Jonathan Cross's user avatar
1 vote
2 answers
280 views

Why isn't its mandatory for the keyservers to be only available via HTTPS?

If I Google for inurl:http+keyserver, on the first 10 pages of hits I can find these: http://pool.sks-keyservers.net/ http://keyserver.ubuntu.com/ http://www.uk.pgp.net/pgpnet/wwwkeys.html http://...
pepite's user avatar
  • 225
8 votes
1 answer
2k views

How is HSM access gated?

On the backend if I use a HSM (or even have the master key on a physical server), I need to do operations using that key. That means the app server is going to call into the HSM (or keyserver). What ...
user220201's user avatar
1 vote
1 answer
651 views

What to share (OpenPGP key ID or fingerprint) once key uploaded on key server?

I have uploaded my public key on: https://sks-keyservers.net/ When sending mails, I want to notify the recipients about my public key just in case they want to use it. Since the key is on key server,...
RPK's user avatar
  • 195
8 votes
2 answers
2k views

Comparing allegedly identical OpenPGP keys published through different channels

tldr version: When I try to compare public keys that are supposed to be for the same entity the versions I get through different channels are NOT the same and the ones that I download as a file like ...
Lew Rockwell Fan's user avatar
1 vote
2 answers
768 views

Best encryption mechanism for message storage/exchange in client/server application

So I am building a client/server system that is similar to email idea where clients exchange messages through the server with the following main requirements (note that the clients are pre-registered ...
Lamya's user avatar
  • 103
4 votes
1 answer
659 views

What would happen if a public key server is compromised?

What would happen if in someway a public key server, let's say the MIT PGP key server, was compromised and some keys would be edited to an attacker's public key? Is this even possible? Would that be ...
woutar's user avatar
  • 43
0 votes
1 answer
216 views

PGP Key Servers Verification Mail? [duplicate]

Why do existing PGP key servers not perform e-mail verification? Wouldn't it help the problem of authenticating of public keys? By e-mail verification/confirmation I mean a single e-mail sent to the ...
lucasmrod's user avatar
1 vote
0 answers
1k views

`gpg --keyserver subkeys.pgp.net` triggers error `armor-keys-failed`

$ gpg --keyserver subkeys.pgp.net --recv-key 0xXXXXXXXXXXXXXXXX gpg: requesting key FDXXXXXX from hkp server subkeys.pgp.net gpg: DBG: armor-keys-...
qazwsx's user avatar
  • 123
11 votes
1 answer
4k views

How long before a key is visible on a key server?

I am playing with GPGTools on a Mac and quite liking it so far, the GUI makes it nice to handle keys. I am using the default hkps://hkps.pool.sks-keyservers.net key server, to which I have uploaded my ...
user1301428's user avatar
  • 1,947