Hi Bernhard,

On 09.07.2019 16:47, Bernhard Reiter wrote:
Once upon
a time I mailed random PGP-using people asking if they'd consider
setting it up and the feedback has been overwhelmingly positive.

Cool, if you receive answer, please help us to keep the list of supporting
organisations growing at https://wiki.gnupg.org/WKD
(We'd have to move it to a subpage soon.)

You can also add Debian there and occrp.org (although the latter doesn't have policy file :().

I think Linux distributions are particularly good target for WKD - they can manage their developer's keys. They use HTTPS and usually developers have e-mail aliases at the distro domain. Additionally now with GnuPG 2.2.17 they can easily make first signature verification faster by utilizing Signer's UID packet (--sender option).

(As a side note, I did contact two distros with that in mind and one of them, I'll share this openly: Gentoo - did handle it in a very professional matter enabling WKD for developers in days and keeping me - an outsider - in the loop for the whole time. I'm still impressed by their execution!)

No problem! I actually also implemented WKD in a couple of projects in
three different languages (OpenKeychain, OpenPGP.js, initial support in
Mailpile,

Cool! Anything more you can share?

I'll think about it, this was just the most pleasant experiences I had in contributing (in no particular order!). I've got a small to-do list for project that I still want to contribute WKD support but sadly I'm out of time currently :-/

I did have a patch for mutt but they didn't like the idea :))

Do you have a link to your upstream submission? Maybe others users can help to
state their interest?

Sure, take a look at the thread starting here:
http://lists.mutt.org/pipermail/mutt-dev/Week-of-Mon-20180702/000157.html

(The patch is not there but it's basically setting external locate mechanism in gpgme so, except one bugfix that I also found, it would be a one-liner).

From what I can see Werner also planned to add that but I don't know how it ended up:

http://lists.mutt.org/pipermail/mutt-dev/Week-of-Mon-20181119/000246.html

Did you also give it to https://neomutt.org/?

Neomutt deferred to Mutt's mailing list, see:
https://github.com/neomutt/neomutt/issues/1282#issuecomment-411401300

On the bright side I've seen other TUI mail clients planning to add WKD support e.g. Aerc (homepage: https://aerc-mail.org/), author's opinion on WKD: https://news.ycombinator.com/item?id=20091100

Kind regards,
Wiktor

--
https://metacode.biz/@wiktor

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to