Started in 2018, Pwnedkeys is an Internet resource that exists to find and catalogue all of the world’s compromised private keys.
These keys are a permanent hazard to online safety and security, because keys never expire, and it is impossible to know if the entity using the key is legitimate.
We do this work by writing software to patrol the parts of the Internet where private keys are commonly disclosed, cataloguing and storing these compromise keys, performing research on this key corpus, and providing a variety of tools to anyone who wishes to protect themselves and their users from compromised keys.