Re: Subject of PGP-encrypted emails

[Alberto Luaces]

Colin Baxter <m43cap@yandex.com> writes:

> Hello Alberto,
>>>>>> Alberto Luaces <aluaces@udc.es> writes:
>
>     > Colin Baxter <m43cap@yandex.com> writes:
>     >> Doesn't autocrypt use the Web Key Directory (WKD) for PGP keys?
>     >> This seems a pain to set up <https://wiki.gnupg.org/WKD>.
>
>     > AFAIK it doesn't, since everything is encoded into the message's
>     > headers.  I have been using it without any WKD setup.
>
>     > Nevertheless, that fact doesn't rule out that it can be used, but
>     > I never heard about it.
>
> Ok, my mistake. My question is getting to be a little off-topic, but if
> WKD is not used then how is the key for a new recipient automatically
> located?

No problem.  It is a discovery protocol, so it grows stronger —so to
say— as far as the communication evolves.  You start sending a message
in the clear, but offer your key in the headers, so it is automatically
collected and used by your interlocutor in the following messages.  Of
course you have also to have an out-of-band mean of verifying the
identity of the other party.

Maybe I lost some details or explained it incorrectly, so here you will
find the idea: https://autocrypt.org/examples.html

-- 
Alberto