Send an encrypted email to Kipp & Zonen Product Security

Use our OpenPGP public key when you need to send sensitive vulnerability information or attachments to productsecurity@kippzonen.com.

Important: Encryption protects the contents of your attachment, but not the email subject, recipients, or other message metadata. Do not put sensitive information in the subject line.

1. Download and verify our public key

Download the Kipp & Zonen public key

Identity: Kipp & Zonen Product Security <productsecurity@kippzonen.com>
Fingerprint: 0BD4 CCD8 AB0B CA02 62E1 CF34 5439 9FFE 54CC 3AC2
Algorithm: RSA 4096-bit
Expiration: Does not expire

Compare the complete fingerprint shown by your OpenPGP software with the fingerprint above. If they do not match exactly, do not use the key.

2. Import the public key

Install GnuPG if you do not already have an OpenPGP application. Open Command Prompt, PowerShell, or Terminal in the directory containing the downloaded key, then run:

gpg --import productsecurity-kippzonen-public.asc

Confirm the imported key and its fingerprint:

gpg --fingerprint productsecurity@kippzonen.com

3. Prepare the information

Save the sensitive report and any supporting material in a file or archive. For example:

vulnerability-report.zip

Avoid including passwords for encrypted archives in the same email. The OpenPGP encryption step below is normally sufficient.

4. Encrypt the file

Run the following command, replacing the example filename as needed:

gpg --output vulnerability-report.zip.gpg --encrypt --recipient productsecurity@kippzonen.com vulnerability-report.zip

GnuPG creates vulnerability-report.zip.gpg. Your original file remains unchanged.

5. Send the encrypted file

Attach the resulting .gpg file to an email and send it to productsecurity@kippzonen.com. Only holders of the corresponding private key can decrypt the attachment.

Keep the unencrypted original in a secure location until receipt has been confirmed. Then follow your organization’s secure deletion and retention policies.

Public key in text format

If the download link is unavailable, save the complete block below as productsecurity-kippzonen-public.asc.

Show the OpenPGP public key

[PASTE THE COMPLETE ASCII-ARMORED PUBLIC KEY HERE]