The following is the GNU All-permissive License as recommended in

Copyright (C) 2024 Free Software Foundation

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. This file is offered as-is, without any warranty.

Contributions are welcome. See



Note that these key servers may contain keys spammed with bogus signatures that might break your ~/.gnupg dir. It's best not to use them if you can avoid it. Before importing or refreshing keys, it's important to make a backup of your ~/.gnupg directory for easy recovery. More info here, and a possible recovery process.

  • (generally very slow)

long key ID strings by default

Add this to ~/.gnupg/gpg.conf:

keyid-format 0xlong


Web Key Directory (WKD) allows Thunderbird and other email clients to fetch PGP keys from our servers rather than This allows us to work around a Thunderbird bug for now. WKD is easy to set up as a static directory under Nginx or Apache.

See the generic guide

mkdir wkd ; cd wkd

# get the main hash that you want
gpg --with-wkd-hash --fingerprint

gpg --no-armor --export > eix5xw7cppcb1wwpq69rhseb31rky1uy

gpg --with-wkd-hash --fingerprint | grep -E -e "$" | sed -e "s/\s*//;s/$//" | xargs -I {} ln -s eix5xw7cppcb1wwpq69rhseb31rky1uy {}

Sync the files to the Web server under a path like

For Nginx:

location /.well-known/openpgpkey {
  root /var/www/wkd;

It's okay if redirects to a URL on

Test: gpg --auto-key-locate clear,wkd --locate-keys