GnuPG WKD (Well Known Directory)

Feature Request

WKD is an easy and secure way to verify PGP keys. It would be useful to integrate this into a cloud email client. Using a browser extension is definitely not the way to go because; 1) you want to be able to logon on a random computer and use the cloud (someone else's computer) without rely on additional software and 2) as a result you want your cloud email client to be mobile, so on your phone, at university, work, wherever and always have the same functionality. Placing files locally would break the cloud concept.

However, to some extent this does seem to be the thought process with Nextcloud. Like relying on a (paid) 3rd party Android application for calendar/contact synchronization. But that's off topic, just to emphasize that some people don't want to rely on additional 3rd party software to get their personal cloud working.

Summary

Web Key Directories provide an easy way to discover public keys through HTTPS. They provide an important piece to the infrastructure to improve the user experience for exchanging secure emails and files.

Organizations using WKD

• C3S
• cotech.de
• gentoo.org
• gnupg.org (Testing accounts available for developers implementing WKD in MUAs.)
• KDAB.com
• kernel.org

Mail Service Providers offering WKD

• Posteo offers web key directory lookup and service for @posteo.de-addresses (Since 2016-12)
• Protonmail supports web key directory lookup (Since 2018-11)
• netzguerilla offers web key directory lookup. (Since 2017-10-11)
• mailbox.org plans to offer web key directory lookup in Q2 2018 (coming with OX Guard 2.10).
• (Self)-hosted email servers that run caesonia - an OpenBSD Email Service setup.

Known mail clients with WKD Support:

• Thunderbird/Enigmail 2.0
• KMail since Version 5.6
• Outlook with GpgOL since Version 2.2.0
• Mailvelope since Version 3.0.0 (Dez 2018)

Known mail clients with WKS Support:

• Thunderbird/Enigmail 2.0
• KMail since Version 5.6
• Outlook with GpgOL (basic, pre-release) since Version 2.2.1 asyGpg2016)

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

The issue names no files, tests, or entry points. First clarify the intended WKD lookup and cloud-mail integration scope, then locate the mail client’s key-discovery and encryption entry points. Done should include an agreed implementation scope and tests covering WKD key discovery.