PGP and WKD

Generate a key

gpg --quick-generate-key "you@itpromail.com" ed25519 sign,cert 2y
gpg --quick-add-key FINGERPRINT cv25519 encr 2y

Upload

1. Export the public key: gpg --export --armor you@itpromail.com
2. Open Account > Encryption and paste the armored block.
3. Enable Encrypt incoming mail to have new messages encrypted to your key before they are stored.

Web Key Directory

Enabling publishing serves your key from our WKD endpoint so that clients such as Thunderbird and gpg can find it automatically using only your address.

gpg --locate-keys you@itpromail.com

Remember that inbound encryption does not hide headers or subject lines, and does not apply to mail already stored.