fix: added WKD setup link verification check to FAQ, added `.well-kno…

…wn/openpgpkey/policy` empty file, removed cc from email to reduce emails to admins

app/controllers/web/my-account/ensure-paid-to-date.js

@@ -108,11 +108,12 @@ async function ensurePaidToDate(ctx, next) {
           ...(ctx.state.user[config.userFields.receiptEmail]
             ? {
                 cc: [
-                  ctx.state.user[config.userFields.fullEmail],
-                  config.email.message.from
+                  ctx.state.user[config.userFields.fullEmail]
+                  // config.email.message.from
                 ]
               }
-            : { cc: config.email.message.from }),
+            : {}),
+          // : { cc: config.email.message.from }),
           subject: ctx.translate('PAYMENT_PAST_DUE_API_RESTRICTED')
         },
         locals: { message, user: ctx.state.user.toObject() }

app/views/faq/index.md

@@ -1127,6 +1127,8 @@ Yes, we support [OpenPGP](https://en.wikipedia.org/wiki/Pretty_Good_Privacy#Open
 * If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key.  This is very rare and usually only applies to advanced users with complex alias rules.
 * **PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject.  If you require PGP encryption on *all* mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.**
 
+**You can validate your Web Key Directory setup at <https://wkd.chimbosonic.com/> (open-source) or <https://www.webkeydirectory.com/> (proprietary).**
+
 <div class="alert my-3 alert-success">
   <i class="fa fa-info-circle font-weight-bold"></i>
   <strong class="font-weight-bold">