🔏 🐷

Trust the Wurst.

Offline.

WRST.IO is the official Wurster project site and default publisher Authority. It certifies exact publisher claims once; Wurster verifies the resulting chain locally without phoning home whenever you open a Wurst. WRST.IO is a project, not a company or incorporated identity provider.

Read the trust model Verify a publisher

Root offline. Issuer online. Wurst portable.

The Root private key is recovered only from an offline Root Meatphrase. A separate rotatable issuer signs publisher certificates after domain or email proof.

🧾

Offline certificates

The issuer certificate and publisher certificate travel with the signed Wurst. Normal verification needs no Authority request.

🌐

Domain proof

WRST.IO proves control of a publisher domain through a short-lived DNS TXT challenge.

📮

Email proof

When outbound mail is enabled, WRST.IO sends a six-digit code from oink@wrst.io and certifies only the email address that successfully returns it.

🔄

Root-signed trust data

Issuer rotation and revocation are distributed as a signed trust bundle while package verification remains offline-first.

🧱

No central requirement

Unsigned Wursts, direct DNS identity and locally trusted publisher keys continue to work without wrst.io.