Your posting key is public. So they don't need that one. They're probably requesting the private posting key. You have public/private key sets for several things as you can see in your account. With the private posting key, if ever stolen, one could only post in your name. Which is not too dramatic, as you can change it any time with your owner private key.