Setting up OpenPGP key server for your custom domain

Finding the correct PGP key of an email recipient is a frequent problem for anyone who uses email encryption to communicate securely with others. Some applications are able to determine the correct keys automatically if the appropriate settings are configured in the DNS (Domain Name System).

If you use mailbox Guard with external (non-mailbox.org) email addresses and wish to enable others to access your OpenPGP keys automatically, then you may use our key server. To do so, set the SRV record for your domain. The following procedure is similar to the steps described in more detail in this article: Setting up email addresses with a custom domain

Create a new entry ("record") of the type SRV. The entry _hkps._tcp.example.com points to the key server at mailbox, i.e., the server that stores the public PGP keys for mailbox. It listens on port 443 at the address pgp.mailbox.org.

DNS record for the key server

\_hkps.\_tcp.example.com IN SRV 1 1 443 pgp.mailbox.org.

Replace example.com with your custom domain (see Setting up email addresses with a custom domain).

Step-by-step guide

This step-by-step guide uses the German provider Hetzner as an example.

1. Select the correct domain (Zone) for the new entry.

2. Click Add Record and select the Type SRV.

3. As Hostname, enter the subdomain you want to configure, here _hkps._tcp.example.com. Replace example.com with your custom domain.

   tip

   Usually, your domain will already be configured or is added automatically so you only have to enter the subdomain _hkps._tcp.

4. Click Add and enter the following data:

   • Priority: 1
   • Weight: 1
   • Port: 443
   • Target: pgp.mailbox.org.

5. Save the record by clicking Add.

Note

Field names and input format requirements may vary depending on your domain provider. If you need help configuring your DNS records, please contact your provider’s support team.