Questions tagged [key-server]
The key-server tag has no usage guidance.
28
questions
0
votes
1
answer
125
views
Is api encryption key vault services really secure?
I am looking for a secure (and as easy as possible) way to store my encryption key.
I have been looking at some services that will hold the key for you and then you can retrieve it with an api. The ...
2
votes
1
answer
270
views
How does one publish UID revocations in the age of Hagrid?
I have published my gpg key on keys.openpgp.org, keyserver.ubuntu.com, and my own WKDs corresponding to each of the two email addresses on my own domains.
Another user updated my public key from my ...
1
vote
1
answer
2k
views
How hacker/ others get your SSH private key / stole your SSH private key?
I know we must keep private keys secure, but as long as we don't share the private key, what can go wrong?
How hackers/others can steal/get your private key?
What is the possible way that can happen ...
4
votes
1
answer
1k
views
Can I change expiration date of a gpg key I've already sent to a key server?
ArchLinux wiki page on GnuPG reads
Once a key has been submitted to a keyserver, it cannot be deleted from the server.
Does that mean that also the expiration date with which I published the key via ...
7
votes
1
answer
4k
views
Is `gpg --refresh-keys` secure and where is this documented?
From the gpg manual:
--refresh-keys
Request updates from a keyserver for keys that already exist on the local keyring.
This is useful for updating a key with the latest signatures, user IDs, etc.
...
1
vote
0
answers
757
views
Best Practices to Store Sensitive Information in Desktop Application (Electron)
I'm working in a desktop application using Electron.js with React.js and I have to store some sensitive information like API keys and database credentials. So I started digging and decided to encrypt ...
0
votes
2
answers
868
views
How to securely get a key from a key server?
In the installation procedure of Gentoo, there is a step to check signature of the downloaded iso file. To do so, we first need to download the set of keys from a key server:
$ gpg --keyserver hkps://...
0
votes
1
answer
343
views
keys.openpgp.org keyserver fails to send confirmation mail to an Outlook-address
I uploaded my master key's public part to the keys.openpgp.org-keyserver. It has 4 UIDs set up (4 different e-mail addresses) and each of them are correct and valid e-mail addresses.
The keyserver ...
0
votes
1
answer
351
views
Secure and private connection to GnuPG keyservers
I wish to privately submit my public key (without it being sniffed on the internet). I found that I have 3 ways to connect to the keyserver securely:
https://<keyserver-url>
hkps://<...
1
vote
1
answer
240
views
Implementing key vault and key rotation for a non-cloud application
I have a desktop application written in Python. The application is connects with an external SAP HANA service and pulls data. There are couple of configuration files where several connection string ...
4
votes
1
answer
584
views
Which tool/key manager to manage people's public keys in organization?
I'm not really an expert on different key types but here it goes. My company never really managed keys. We have an SKS server that was set up to manage GPG keys for a couple of users sending encrypted ...
1
vote
0
answers
140
views
How does a GPG Keyserver deal with conflicting signatures?
Part of the web of trust of GPG is the use of Keyservers to publish/distribute versions of public keys. It's encouraged of course to sign public keys you trust so the the web may grow.
How does a ...
1
vote
0
answers
100
views
How do I check if my key is updated in a keyserver after I resend it with new signatures?
I'm working in a task for class where I need to sign my public key with 3 signatures. After I got them, I need to send my key back to the keyserver with these 3 new signatures.
The thing is that when ...
2
votes
1
answer
367
views
Encryption Engine vs Key Server
What is the difference (if any) between a Key Server and an Encryption Engine?
Is a Key Server also the same as a Key Manager?
I've seen the terms Encryption Engine, Key Server and Key Manager used ...
24
votes
1
answer
26k
views
Sending the GPG key to keyserver
Today I started learning how to work with GPG keys. I successfully generated a pair for me, and imported some other keys, encrypted some files and successfully decrypted them.
I want to send my GPG ...
1
vote
4
answers
244
views
RAID on HSM network
I want to implement a network of HSMs to secure millions of private keys. To increase fault tolerance and speed, I would want this network to run RAID 50 (striping, parity and duplication). As I ...
3
votes
1
answer
6k
views
How do I check who a public PGP/RSA key belongs to?
I am new to public key cryptography. I see from keyservers it's possible to do a look up for public keys associated with an email address.
Is there a reverse function available to check what email/...
0
votes
1
answer
555
views
How to store encrypted user's data on a server, decrypt only on the client, and store the key elsewhere?
Here's what I would like to do: have a client side that generates and processes the user's data, then encrypts it and stores in a database - in order to later retrieve, decrypt and process the data ...
0
votes
1
answer
216
views
Why isn't PGP used to authenticate with keyservers?
OpenPGP can be used to sign messages / authenticate. Why is this not required by keyservers to ensure that only the owner of the private key can upload / modify / remove the public key on the server?
...
1
vote
2
answers
273
views
Why isn't its mandatory for the keyservers to be only available via HTTPS?
If I Google for inurl:http+keyserver, on the first 10 pages of hits I can find these:
http://pool.sks-keyservers.net/
http://keyserver.ubuntu.com/
http://www.uk.pgp.net/pgpnet/wwwkeys.html
http://...
8
votes
1
answer
2k
views
How is HSM access gated?
On the backend if I use a HSM (or even have the master key on a physical server), I need to do operations using that key. That means the app server is going to call into the HSM (or keyserver). What ...
1
vote
1
answer
635
views
What to share (OpenPGP key ID or fingerprint) once key uploaded on key server?
I have uploaded my public key on:
https://sks-keyservers.net/
When sending mails, I want to notify the recipients about my public key just in case they want to use it.
Since the key is on key server,...
8
votes
2
answers
2k
views
Comparing allegedly identical OpenPGP keys published through different channels
tldr version:
When I try to compare public keys that are supposed to be for the same entity the versions I get through different channels are NOT the same and the ones that I download as a file like ...
1
vote
2
answers
757
views
Best encryption mechanism for message storage/exchange in client/server application
So I am building a client/server system that is similar to email idea where clients exchange messages through the server with the following main requirements (note that the clients are pre-registered ...
4
votes
1
answer
644
views
What would happen if a public key server is compromised?
What would happen if in someway a public key server, let's say the MIT PGP key server, was compromised and some keys would be edited to an attacker's public key?
Is this even possible?
Would that be ...
0
votes
1
answer
191
views
PGP Key Servers Verification Mail? [duplicate]
Why do existing PGP key servers not perform e-mail verification?
Wouldn't it help the problem of authenticating of public keys?
By e-mail verification/confirmation I mean a single e-mail sent to the ...
1
vote
0
answers
1k
views
`gpg --keyserver subkeys.pgp.net` triggers error `armor-keys-failed`
$ gpg --keyserver subkeys.pgp.net --recv-key 0xXXXXXXXXXXXXXXXX
gpg: requesting key FDXXXXXX from hkp server subkeys.pgp.net
gpg: DBG: armor-keys-...
11
votes
1
answer
4k
views
How long before a key is visible on a key server?
I am playing with GPGTools on a Mac and quite liking it so far, the GUI makes it nice to handle keys. I am using the default hkps://hkps.pool.sks-keyservers.net key server, to which I have uploaded my ...