gpg --recv-keys fails / no longer use keyservers for anything

[Patrick]

Default GPG keyservers

An interesting conversation on the GPG mailing list that’s been ongoing for months. This info should help us choose a good set of default keyservers for user protection from fake signatures and/or DoS against the WoT. security-misc /etc/skel/.gnupg/gpg.conf doesn’t define any currently. Problem: The keystore trilemma is not yet solved. You can have two out of three of decentralisation, universality, and abuse-resistance. WKD is decentralised and abuse-resistant but is not universal. keys.o…

new, fixed keyserver - keys.openpgp.org

Good news! Quote https://tails.boum.org/doc/encryption_and_privacy/openpgp_keyserver/index.en.html About keys.openpgp.org OpenPGP keyservers are public repositories of OpenPGP public keys that applications use to discover the public keys of contacts. In Tails 4.1 (December 2019), we changed the default GnuPG configuration to use https://keys.openpgp.org/, also available on http://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion/, as the default OpenPGP keyserver. keys.openp…