Use this key to verify signed communications from us, or to encrypt sensitive messages to us.
| UID | Cryptoservers Ltd <[email protected]> |
|---|---|
| Key type | Ed25519 (primary) + Cv25519 (encryption subkey) |
| Key ID | 0xA62AEDAF647EE3E6 |
| Fingerprint | 4DCF 5D6D 10AF F2AA 47E2 070E A62A EDAF 647E E3E6 |
| Created | 2026-04-22 |
| Expires | 2029-04-22 |
| Signed by | Cross-signed by the keys of our two founding engineers + the Saint Kitts company secretary. |
You should verify the key before trusting it. Four independent channels to cross-check the fingerprint A62A EDAF 647E E3E6:
_openpgpkey.cryptoservers.io TXT record lists the same fingerprint.keys.openpgp.org, keyserver.ubuntu.com, pgp.mit.edu.If any of the four disagree with the fingerprint on this page, do not use the key and email [email protected] with the discrepancy.
Automated system emails (password reset, usage alerts) are not PGP-signed. Do not assume an unsigned automated email is authoritative — cross-check via the panel.
We rotate the primary key every three years, with overlap: the new key is published six months before expiry, cross-signed by the outgoing key, and the transition is announced on this page, in the canary, and via email to account holders with PGP public keys on file.
If the key is compromised or suspected compromised, a revocation certificate is published immediately on this page, to the keyservers listed above, and via the next canary release. We keep the pre-signed revocation certificate offline, split via Shamir secret-sharing across the Saint Kitts company secretary and two non-operational officers.
For sensitive matters (abuse reports involving identifiable individuals, legal notices, security-research disclosures, sensitive billing queries) we recommend PGP-encrypted and/or signed mail.
If you do not have a PGP key of your own and still want to reach us over an end-to-end-encrypted channel, mention it in a plain email to [email protected] and we will set up an ephemeral Signal or Element room for the exchange.