[openpgp] OpenPGP-CA at Proton

[Aron Wussler <[e-mail]>]

Hi all,

as promised at the summit we've been working on a CA to sign Proton users' keys. We're following the OpenPGP-CA [1] idea, adding a generic certification on the public keys that can be retrieved from WKD or PKS.
Signatures last 6 months, and will be extended maintaining the original creation, to allow de-duplication (the duration of the new signature will be a strict superset of the previous). Furthermore signatures contain the Issuer ID, to locate the CA key in an easier way.

I personally would like to thank all the developers of OpenPGP-CA for creating the project, even though we can't run the code directly because of scalability issues, the idea is great and I wish it a wide deployment!
On this note, we also added support for external certifications onto imported keys: if you are running your own CA you can import your private key directly signed and those signatures will be seamlessly made available on the public key.

You can fetch the CA key at the WKD address [e-mail] or via PKS at [2] . We're still finishing to sign all the backlog of keys, so don't worry if some keys are not signed yet. The official announcement can be found at [3].

Cheers and happy verification,
Aron

[1] https://openpgp-ca.org/

[2] https://api.protonmail.ch/pks/lookup?search=[e-mail]&op=get

[3] https://proton.me/blog/why-we-created-protonca

--
Aron Wussler
Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930