Page MenuHome GnuPG
Create Task
Maniphest T3910

Kleopatra: Direct way to WKD Lookup a key
Open, NormalPublic
Actions

Description

Kleopatra has "Lookup Key" which searches the keyservers. It also does an implicit "--locate-key" (WKD Search) when recipients are entered.

It should combine WKD Lookup with the Keyserver Lookup feature.

I think the best implementation might be the following:

  1. When searching for something that looks like a mailbox do a --locate-key with WKD enabled.
    1. If no key is found, do a keyserver search as we do now.
    2. If a key is found, show that key.
      1. Show an additional button "Search on Keyservers" so that advanced users still have the option to skip WKD and we don't have feature loss. (E.g. this could be important of X509 keyservers)

Details

Version
master

Related Objects

Event Timeline

aheinecke created this task.Apr 16 2018, 2:04 PM
aheinecke mentioned this in T2917: --locate-key should re-fetch key via WKD if it is expired.Jul 2 2018, 11:13 AM
wiktor-k added a subscriber: wiktor-k.Jul 2 2018, 11:39 AM

Ha, I wish e-mail-like searches would be done using only WKD with no fallbacks to keyservers... that way keys would be "more verified"... but I understand it may be not practical :)

werner added a subscriber: werner.Aug 28 2018, 3:39 PM

FWIW, we record the origin of the keys. So you have the information. Use --with-key-origin in a key listing. GPGME also has the info.

ebo added a subscriber: ebo.May 24 2023, 9:40 AM
ebo added a project: Restricted Project.Aug 18 2023, 10:53 AM