Re: CNAME aliases for wkd.keys.openpgp.org and X.509 certificates [was: Re: WKD for GitHub pages]

[Juergen Bruckner via Gnupg-users]

Hello Group!

Am 16.01.21 um 03:26 schrieb Vincent Breitmoser via Gnupg-users:

Daniel Kahn Gillmor via Gnupg-users <gnupg-users@gnupg.org> wrote:

On Mon 2021-01-11 22:59:10 +0100, Ángel wrote:

The "make a CNAME of your openpgpkeys subdomain to
wkd.keys.openpgp.org" couldn't work with https certificate validation,
thouth (or are they requesting a certificate on-the-fly?)

In fact, i believe that keys.openpgp.org *is* requesting and retaining a
certificate on-the-fly if it finds itself addressed by such a CNAME.

Yep. If that wasn't possible, we wouldn't do it.

btw, if anyone is interested: keys.o.o serves wkd for 224 domains right now.

  - V

Now I'm a bit confused :O


Or did I understand anything wrong?

BTW ... do any of you know a tutorial to set up WKD for 'Dummies'?

best regards
Juergen


--
/¯\   No  |
\ /  HTML |    Juergen Bruckner
 X    in  |    juergen@bruckner.email
/ \  Mail |

I thought WKD can be used with your own webserver. So why do I have to make a CNAME recort pointing to "wkd.keys.openpgp.org"?

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users