← Feed

Posts

• Post #3236156

  New Blog: #Keyserver Updates and Roadmap, December 2025 ... About half of the public #Hockeypuck keyservers have been upgraded to the 2.3 branch (as of 2025-12-08), including the pgpkeys.eu servers. A small number remain on 2.1 for compatibility reasons, but the remaining issues preventing upgrade of these 2.1 servers will be addressed in an upcoming 2.3.x release. ... While HKPv2 and RFC9580 support are the current priorities, further improvements are planned for delivery in 2026 and 2027....

• Post #3236155

  We are pleased to announce the release of Hockeypuck 2.3.1. Hockeypuck 2.3.1 is primarily a bugfix and maintenance release: * Fix broken delete-keys helper script * Bumped dependencies and refactored redundant code paths * Improved PKS support * Config parameter to increase the number of results returned from a search There are no breaking changes between the 2.2 and 2.3 branches, and SKS sync is supported between 2.2 and 2.3 peers. Release notes can be found at https:// github.com/hockeypu...

• Post #3236154

  Good news! The HKP draft has been adopted by the IETF #OpenPGP Working Group, the first official step towards publication as an RFC 🤩 It is now known as draft-IETF-openpgp-hkp, which replaces draft-gallagher-openpgp-hkp, which itself replaced draft-shaw-openpgp-hkp. It has been a long couple of decades 😂 https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-hkp

• Post #2152950

  RE: https://mastodon.social/@protonprivacy/116521505054845875 Argh, Proton beat us to it! 😂 Congratulations to the Proton crypto team. We have been working closely with them for some years now to help improve the #OpenPGP ecosystem. Hockeypuck shares a Go cryptography library with ProtonMail's server-side codebase and we're continually working on enhancements. Don't worry - PQC support in Hockeypuck will be shipped *very soon now* 😈 Watch this space!

• Post #2088630

  Exciting news from the coalface! The first beta of Hockeypuck 2.4 with PQC support is now live on https://test.pgpkeys.eu for public evaluation. #OpenPGP is going post-quantum in 2026, and the #Hockeypuck #keyserver software is prepared to distribute post-quantum-safe OpenPGP certificates. Hockeypuck 2.4-beta1 supports post-quantum-safe signing and encryption algorithms based on ML-DSA-65, ML-DSA-87, ML-KEM-768, and ML-KEM-1024, each used in hybrid mode with either curve25519 or curve448 ECC....

• Post #1574534

  We are pleased to announce the release of Hockeypuck 2.3.3. This is a feature-preview release that partially implements https://github.com/hockeypuck/hockeypuck/wiki/HIP-013:-In%E2%80%90Band-Metadata-Sync-Using-Trust-Packets . It also fixes a bug due to stale entries in the PostgreSQL database. Hockeypuck 2.3.3 adds support for the enumerableDomains configuration parameter. This is a list of domains for which the keyserver will return results when queried by UserID, even if the keys have been...

• Post #1025171

  The road to post-quantum cryptography (PQC) has been long, but the end is nigh. For the past nine months we’ve been working on technical debt issues in hockeypuck, resulting in the 2.3.x series of releases. This has included a major postgres schema redesign, in-place reloading, reindexing threads, configurable keyword search, and significant refactoring of hockeypuck’s internals. v2.3.3 is in final testing with the last of these improvements, and will be released soon. But this is all just pre...

• Post #563142

  We are pleased to announce the release of Hockeypuck 2.3.2. Hockeypuck 2.3.2 is primarily a bugfix release to revert a cryptographic policy default in go 1.24 that rendered some historical keys unverifiable. It also fixes some papercuts in the build process and improves the efficiency of database cleanup. * Permit small RSA keys (reverts go 1.24 policy to that of 1.23) * Clean more than one database entry per hashquery * Use apt-get instead of apt in build scripts * Match go patch versions bet...