4 ms·
DNS-based key discovery has already been invented twice: PKA and OPENPGPKEY. Nobody is using it. It has an obvious problem: DNS is not secure. There is DNSSEC,
by hannob 10y ago
DNS-based key discovery has already been invented twice: PKA and OPENPGPKEY. Nobody is using it.
It has an obvious problem: DNS is not secure. There is DNSSEC, but it's practically undeployed on clients, therefore building on it doesn't make sense.
GPG recently added support for key discovery via HTTPS (Web Key Service, WKS). That goes in the right direction, because it takes the best deployed working authentication system - the web pki - and bootstraps from there.
- EmilStenstrom 10y agoI don't think this is about inventing a new protocol. It's about getting Gmail and Thunderbird on board. Has anyone put them in a room together?
- nickpsecurity 10y agohttps://thehackernews.com/2014/12/gmail-end-to-end-encryption.html https://thehackernews.com/2014/12/gmail-end-to-end-encryptio... https://www.enigmail.net/index.php/en/ https://www.enigmail.net/index.php/en/ I haven't seen them in a room together but they each have something available. Making it Chrome/Gmail extension, Firefox plugin, and Thunderbird Enigmail interoperable may go a long way. Still UI issues and apathy that will hurt uptake. To start with.
- ttul 10y agoYes, we all got together this week in Paris.
- EmilStenstrom 10y agoWho do you represent? Who got together?
- confounded 10y agoSee also: https://www.mailvelope.com/ https://www.mailvelope.com/