ZFND Web Key Directory (WKD)

This repository hosts the Web Key Directory for Zcash Foundation security disclosure keys.

Usage

Retrieve the ZFND security team's public key automatically:

gpg --locate-keys [email protected]

Or verify WKD is working:

gpg --auto-key-locate clear,wkd,nodefault --locate-key [email protected]

Structure

.well-known/
└── openpgpkey/
    └── zfnd.org/
        ├── policy      # Required empty file
        └── hu/
            └── <hash>  # GPG public key (binary)

Adding/Updating Keys

Requires GPG >= 2.2.12:

1. List installed public keys for [email protected]

gpg --list-options show-only-fpr-mbox -k "[email protected]"

2. Install the key to your local git repo, this will create the correct directory structure and files for the Web Key Directory (WKD)

$(gpgconf --list-dirs libexecdir)/gpg-wks-client -v --install-key [PRIMARY_KEY_ID] [email protected]

3. Update the git repo with the new public key

cd openpgpkey/
git add zfnd.org
git commit -m "Adding [email protected] public key"
git push origin

DNS Configuration

Requires CNAME record:

openpgpkey.zfnd.org → zcashfoundation.github.io