Desktop Email Encryption

 View Only

Email signatures from Symantec are unverified - how to get public key

  • 1.  Email signatures from Symantec are unverified - how to get public key

    Posted Sep 09, 2016 01:02 AM

    Hi,

    I've received an email from Symantec asking me to reconfirm my email address in the Global Directory.

    The email was sent from an email server using the domain @keyserver1.sysauth.net however this domain is not in the global verification keys that you can download from either

    https://keyserver.pgp.com

    or

    http://www.symantec.com/docs/HOWTO83926

    I've also received emails from keyserver2.sysauth.net

    The email I received has therefore been listed as "unverified" by PGP Desktop as I believe it should have, as there was no match.

    I've lodged a case with Symantec and they have confirmed that this email was sent from a server within their email cluster. I'm happy with everything up to this point.

    However I can't get from Symantec a link to download their updated verification keys which include the new domains that they are using so that I can verify their emails - just like the emails I received back in March which were verified.

     

    Can anyone reply with a link to where their updated keys are kept or give me a vector into the proper route to get this fixed?

    I find it suprising that a security company sends emails which cannot be verified as being sent by them.

     

    Thanks for your help in advance.