Colin Baxter <[email protected]> writes: > Hello Alberto, >>>>>> Alberto Luaces <[email protected]> writes: > > > Colin Baxter <[email protected]> writes: > >> Doesn't autocrypt use the Web Key Directory (WKD) for PGP keys? > >> This seems a pain to set up <https://wiki.gnupg.org/WKD>. > > > AFAIK it doesn't, since everything is encoded into the message's > > headers. I have been using it without any WKD setup. > > > Nevertheless, that fact doesn't rule out that it can be used, but > > I never heard about it. > > Ok, my mistake. My question is getting to be a little off-topic, but if > WKD is not used then how is the key for a new recipient automatically > located?
No problem. It is a discovery protocol, so it grows stronger —so to say— as far as the communication evolves. You start sending a message in the clear, but offer your key in the headers, so it is automatically collected and used by your interlocutor in the following messages. Of course you have also to have an out-of-band mean of verifying the identity of the other party. Maybe I lost some details or explained it incorrectly, so here you will find the idea: https://autocrypt.org/examples.html -- Alberto
