This is in accordance with the information provided by Facebook in their post Securing Email Communications from Facebookįacebook's OpenPGP key comprises a long term primary key with short term subkeys this allows us to frequently rotate our operational keys whilst maintaining the web of trust and a consistent identity over time. Looking up the key 0x2F3898CEDEE958CF on a keyserver (see e.g. My main question: How can I verify the email signature from Facebook?Īnd by the way: Why would Facebook use a key that produces a signature that can not be verified? I have found no source for the key 0x3028CF59770E7A01.

I have found no way to contact the sender of the message.Please ask the sender of the message to send you their key by email. Most likely, the owner of the key did not upload their key to the keyserver. The key with ID 0x3028CF59770E7A01 is not available on the keyserver. When I try to import the key 0x3028CF59770E7A01 with Enigmail the following notification is displayed: These emails are signed with a key (0x3028CF59770E7A01) which is not the one provided by Facebook (0x2F3898CEDEE958CF). “encrypted notifications” regarding my account have been sent to me repeatedly via email from Facebook These emails are encrypted with my public key, that I have uploaded to Facebook. – Securing Email Communications from Facebookįacebook provides a public key (0x2F3898CEDEE958CF) at

To add OpenPGP public keys to their profile these keys can be used to 'end-to-end' encrypt notification emails sent from Facebook to your preferred email accounts.

Facebook notifier email