Security

If you are in doubt or facing a situation where identity assurance is required, please do ask for a proof of identity. Picture or a photograph of a signature is not an acceptable identity proof.

HTTPS

We rely on Let's Encrypt to ensure compatibility and trust with as many devices as possible. The HTTPS certificate is rotated automatically. The HTTPS connection terminates on a machine with restricted physical access.

WKD

This website serves a WKD. In general, you can use the following command to fetch a user's GPG key:

gpg-wks-client --print-wkd-url username@jasku.xyz

We are also hosting GPG keys for other domains. The GPG key for user@example.com can be obtained as follows:

domain=example.com
username=user
hash=$(gpg-wks-client --print-wkd-hash $username@$domain)
curl https://openpgpkey.jasku.xyz/.well-known/openpgpkey/$domain/hu/$hash?l=$username

There is no central list of published keys.