Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I recently set up a public OpenPGP key server in the US that synchronizes with the predominant global key pool. I now have a server on my hands containing gigabytes of user-generated content (e.g. names, comments, the keys themselves, etc.).

I assume based on the commonplace of such systems that I am legally permitted to distribute that content, as that is, after all, the point of a key server.

But I'm not comfortable just making that assumption. Is there a definitive explanation of the content's copyright status, or at least a similar situation involving other user-generated content to which I can make reasonable comparisons?

I've skimmed the web interfaces of various key servers and have found nothing to the effect of a terms of service document. Normally with this kind of question I'd ask the primary source or distributor of the data, but as this is a decentralized dataset I'm not sure where to go. I expect that other key server operators are in the same position as myself.

share|improve this question
are you asking about creating a mirror or repository of pgp keys? what content are you talking about, exactly? –  PatomaS Feb 21 at 2:14
That is a much more clear question, thank you. –  PatomaS Feb 21 at 7:02
I don't know the answer to that question, and after checking a bit, doesn't seem to be clear anywhere, but considering that those keys are related to privacy and security, redistributing them outside of a key server seems wrong. There is no forum or place with clear rules where you can read about or ask the question? If there is a related forum, they sure will know the right answer. –  PatomaS Feb 21 at 7:27
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.