PGP key.

Public encryption key for tipoffs@wuts.press. Senders may encrypt tip-offs locally against this key before transmission. The publication's side of the encryption is hosted on ProtonMail; the key below is the same key Proton serves to other PGP-aware clients.

Fingerprint

D3AC AA57 4518 2677 D4BE 1A83 6433 9435 51C6 AA45

Key metadata

Download

ASCII-armored public key: tipoffs-wuts-press.asc. Save the file, import into your PGP client, verify the fingerprint above matches what your client reports, then encrypt your message against the key.

Inline

For copy-paste convenience the key block is reproduced below. The fingerprint of the block below must match the fingerprint above; if it does not, do not use this key and contact the publication through any of the alternative channels.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=d9CW
-----END PGP PUBLIC KEY BLOCK-----

Verification

Three independent ways to verify the key on this page belongs to tipoffs@wuts.press:

1. Fetch the key from ProtonMail's key server directly via the link in §02 above. The fingerprint should match.
2. Send a test message from a ProtonMail address to tipoffs@wuts.press. Proton-to-Proton mail is automatically encrypted; if the message is delivered and a reply arrives, the encryption pipeline is intact.
3. Verify the DKIM signature on any reply from tipoffs@wuts.press. A valid signature proves the message originated from a key authorised on the wuts.press domain.