Allow the use of a self-generated PGP key without having to upload the private key
ProtonMail currently expects me to upload the full keypair instead of allowing uploading just the public key.
This makes it overly difficult to use just one self-generated keypair. To the extent that this feels intentional so that ProtonMail would have the private keys.
Taavi
shared this idea
-
Protoner
commented
On help page
https://proton.me/support/how-to-use-pgp
in section "Email with public key attached" it is described how you can TRUST a public key.
However, the problem is that the button to trust does NOT appear if the PGP key hs not been published on a public key server.Use case:
You might want to generate a key pair for yourself and then send the public key to specific users you want to have an encrypted email conversation. Fine. If using Proton Mail you need to upload the public key to a key server. But that action exploits your email address to everyone who checks on the key server if it exists!
You might not want to reveal on a public key server, that your email address exists!!Please allow the experienced user who can assess if he/she can trust the received signature or public key! Independent of the method he/she got hold of the key (server, email attached, USB-stick etc.)