Web Key Directory Checker

Content

This tool verifies Web Key Directory (WKD) configuration for email addresses, checking both direct and advanced discovery methods. It validates policy files, CORS headers, key availability, and proper key association with the email address.

At least one Method is required to be set up for the WKD to work.

Policy Available:Unknown

Policy CORS Valid:Unknown

Key Location:Unknown

Key Available:Unknown

Key CORS Valid:Unknown

Key Type:Unknown

Fingerprint:Unknown

Email in Key:Unknown

Policy Available:Unknown

Policy CORS Valid:Unknown

Key Location:Unknown

Key Available:Unknown

Key CORS Valid:Unknown

Key Type:Unknown

Fingerprint:Unknown

Email in Key:Unknown

API Documentation#

Endpoint: POST https://miarecki.eu/api/wkd

Method: POST with Content-Type: application/json or application/x-www-form-urlencoded

Request Body:

  • JSON Format:
    1
    2
    3
    {
     "email": "[email protected]"
    }
  • x-www-form-urlencoded Format:

Response:

  • JSON Object with advanced and direct properties, each containing a KeyCheckResult object.
  • Example:
     1
     2
     3
     4
     5
     6
     7
     8
     9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
     {
     "advanced": {
     "policyAvailable": false,
     "policyCorsValid": false,
     "key_location": "https://openpgpkey.miarecki.eu/.well-known/openpgpkey/miarecki.eu/hu/u5u31zhdn1tyua7kdr4xmbd7k3h733b7?l=jonatan",
     "key_available": false,
     "keyCorsValid": false,
     "keyType": "Invalid",
     "fingerprint": null,
     "emailInKey": false,
     "valid": false
     },
     "direct": {
     "policyAvailable": true,
     "policyCorsValid": true,
     "key_location": "https://miarecki.eu/.well-known/openpgpkey/hu/u5u31zhdn1tyua7kdr4xmbd7k3h733b7?l=jonatan",
     "key_available": true,
     "keyCorsValid": true,
     "keyType": "BinaryKey",
     "fingerprint": "18EECCF319422F31D717796880B1C14A34B7634A",
     "emailInKey": true,
     "valid": true
     }
     }
Summary
The article discusses a tool designed to verify the configuration of the Web Key Directory (WKD) for email addresses, utilizing both direct and advanced discovery methods. It checks various aspects such as policy files, CORS headers, key availability, and the correct association of keys with email addresses. For the WKD to function, at least one method must be established. The article provides an API endpoint for users to submit email addresses and receive a JSON response detailing the results of the key checks. The response includes properties for both advanced and direct checks, indicating the availability and validity of policies, keys, and CORS settings. An example response illustrates the potential outcomes, showing whether the key is valid, its location, type, and whether the email is included in the key. The tool aims to enhance the security and reliability of email encryption through proper WKD configuration.