Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
[Re-send with correct from: address… apologies to the moderators for the noise] On 1/9/24 15:55, Marco Moock via Gnupg-users wrote: Is there a limit for DNS records? In theory, probably not. In practice, most definitely, especially if you don't "own" the DNS server. I don't see a problem

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Marco Moock via Gnupg-users
Am 01.09.2024 um 15:51:57 Uhr schrieb Stuart Longland: > Given the public key is published in DNS records, could you imagine > the hot mess that'd create for domains with lots of users? Either > lots of DNS records, or lots of users sharing the same private key. Is there a limit for DNS records?

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
On 1/9/24 15:42, Marco Moock wrote: It would be possible to sign DKIM at the MUA, but this is not common. With the selectors, each user could have its own selector and private key. Given the public key is published in DNS records, could you imagine the hot mess that'd create for domains with

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Marco Moock via Gnupg-users
Am 01.09.2024 um 14:46:58 Uhr schrieb Stuart Longland via Gnupg-users: > 1. end-to-end digitally sign the email, the email is not signed until > it is transmitted by your mail server, malicious code (or users) on > the server can still manipulate it before sending. It would be possible to sign DK

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
On 1/9/24 02:29, T. S. wrote: after looking into DKIM details, I started searching, why the same procedure cannot be used for gpg? DKIM signs emails that are sent server-to-server. It does not perform encryption of the email (that is done by the sending server sending the `STARTTLS` SMTP com

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Marco Moock via Gnupg-users
Am Sat, 31 Aug 2024 18:29:17 +0200 schrieb "T. S." : > Is somethings similar available for GPG/PGP? I don't know about such an implementation, but if you want to create one, everybody can publish RFCs at IETF, so feel free to create such a technology. If you want something unofficial, use the X-

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Konstantin Ryabitsev via Gnupg-users
On Sat, Aug 31, 2024 at 06:29:17PM GMT, T. S. wrote: The same thought did occur to me, which is why the patch attestation process used by many in the kernel development community uses DKIM-like signatures: https://github.com/mricon/patatt However, this is limited to signing -- I don't believe th

Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread T. S.
Hello,after looking into DKIM details, I started searching, why the same procedure cannot be used for gpg?With gpg a lot of people from get confused, when they receive signed mails either because of the -BEGIN PGP SIGNED MESSAGE- strings, or because the unknown attachments in MIME message.W