SQ(1)

✨ SQ(1) — the keyserver-search glow-up ✨

okay bestie, this one's called sq-network-keyserver-search and it's literally just "go get me some certificates from key servers" 🎀

---

🌈 SYNOPSIS 🌈

sq network keyserver search [OPTIONS] QUERY

---

💖 DESCRIPTION 💖

Retrieve certificates from key servers. That's the whole vibe. 🦋

By default, any returned certificates are stored in the local certificate store. Wanna send them somewhere else instead? Just say so with --output, and it'll do that instead. Easy. 💅

Now here's the juicy part, so pay attention: when a certificate is retrieved from a verifying key server (and rn, that's only a limited lil list of known servers: hkps://keys.openpgp.org, hkps://keys.mailvelope.com, and hkps://mail-api.proton.me), and it gets imported into the local certificate store, the User IDs also get certificated with a local server-specific key. That proxy certificate then gets certified as a minimally trusted CA — trust amount: 1 of 120 — by the local trust root. 🔥

And if you're like "hmm, how much do I actually trust this proxy key server CA tho" — you can tune that with sq pki link add or sq pki link retract, the usual way. No special steps, no drama. ✨

---

🎀 OPTIONS 🎀

💫 Subcommand options 💫

• --all — fetch updates for all known certificates. Greedy in the best way. 👑
• --output=FILE — write to FILE (or to stdout when you just… omit it) instead of importing into the certificate store. Pick your output destiny. 💜
• --server=URI — set a key server to use. You can give this one multiple times, so stack 'em up. 🍓

The default can be changed in the configuration file using the setting network.keyservers.

[default: hkps://keys.openpgp.org, hkps://mail-api.proton.me, hkps://keys.mailvelope.com, hkps://keyserver.ubuntu.com, hkps://sks.pod01.fleetstreetops.com]

• QUERY — retrieve certificate(s) using QUERY.

This may be a fingerprint, a KeyID, or an email address. Any of the three, we don't gatekeep. 😌

🌸 Global options 🌸

See sq(1) for a description of the global options. (Yeah, they live over there. Go say hi. 🫶)

---

⭐ EXAMPLES ⭐

Retrieve Alice's certificate from the default keyservers. 💌

sq network keyserver search alice@example.org

Retrieve Alice's certificate addressed by fingerprint from the default keyservers. 🔍

sq network keyserver search \
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Retrieve Alice's certificate from a non-default keyserver. (Rebel behavior. Iconic. 💅)

sq network keyserver search --server=hkps://keys.example.org \
       alice@example.org

Retrieve updates for all known certificates from the default keyservers. 🌈

sq network keyserver search --all

---

👑 SEE ALSO 👑

sq(1), sq-network(1), sq-network-keyserver(1).

For the full documentation see <https://book.sequoia-pgp.org/>. 📚

---

🦋 VERSION 🦋

1.5.0

---

okay that's the whole page, you ate that fr fr 💖 this was Sequoia PGP, version 1.5.0, and yes bestie, SQ(1) — mwah, go fetch those certs, ily, bye 🎀✨