Re: [Sks-devel] HKPS + ssl + nginx

[address@hidden]

On Fri, 31 Jul 2015 11:05:15 +1200
Mike Forbes <address@hidden> wrote:

> If we were to serve this using the HKPS cert I imagine it would throw
> a certificate warning for most people who haven't imported the
> hkps.pool.sks-keyservers.net CA.

If you want to use hkps.pool.sks-keyservers.net with GnuPG you have to download 
and configure the CA certificate. That's at least how it is explained in 
https://help.riseup.net/en/security/message-security/openpgp/best-practices/#use-the-sks-keyserver-pool-instead-of-one-specific-server-with-secure-connections
 .

So maybe this also answers the rest of your questions?


Sincerely,

Malte