Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread have--- via Gnupg-users
On Tue, 7 Jan 2025 00:32:36 -0500, Robert J. Hansen wrote: IIRC, Autocrypt specifies a way for public keys to be transferred in an email header that's parsed by Autocrypt-aware clients and not rendered or acted upon by non-aware clients. Seems like the best thing going right now. Thanks fo

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread have--- via Gnupg-users
On Mon, 06 Jan 2025 22:58:52 +0100, Steffen Nurpmeso wrote: - Distribute the key along with your mail address using the Web Key directory. aren't there also proposals to do this via special mime types? "Problem" is that .asc is not only used for key distribution, but also for normal sign

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread have--- via Gnupg-users
On Mon, 6 Jan 2025 10:53:43 +0100, Vincent Breitmoser wrote: ...do you think PQC-sized public keys might become a challenge? I attached to my prior list message the same PQC key that was rejected by keys.openpgp.org when I tried to upload it. It’s 3106 bytes, ASCII-armored. PQ keys with

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread have--- via Gnupg-users
On Mon, 06 Jan 2025 09:09:28 +0100, Werner Koch wrote (quotes rearranged): For initail key discovering (lookup) there are better methods: Thanks for the tips. - Send the key with your initial may and start to build up trust. (after all there must be some reason that you trust a mail addre

Infrastructure support for GnuPG post-quantum keys (Re: Betamax v. VHS, and the future of PQ-PGP)

2025-01-03 Thread have--- via Gnupg-users
This is a followup on infrastructure support for PQ-PGP keys. On Wed, 1 Jan 2025 23:57:25 +, h...@anonymous.sex wrote: I attempted to upload a post-quantum key created with GnuPG v2.5.1 to keys.openpgp.org. [...] I promptly reached out to supp...@keys.openpgp.org to ask when the infrastr

GnuPG meets the standard of care set by Signal (Re: Betamax v. VHS, and the future of PQ-PGP)

2025-01-03 Thread have--- via Gnupg-users
On Thu, 2 Jan 2025 19:25:01 -0500, Robert J. Hansen wrote: Breaking RSA-4096 via Shor's algorithm is straight out of science fiction. No, *this* is science fiction: It’s been known since 1977 that factoring is merely an O(log n) problem, easy-peasy, if you have a (classical) computer with

Betamax v. VHS, and the future of PQ-PGP

2025-01-01 Thread have--- via Gnupg-users
A disquisition could here ensue on the long-term security reasons why everyone should start using ky1024_cv448 encryption subkeys RIGHT NOW. https://en.wikipedia.org/wiki/Massive_Data_Repository But if you understand security well enough to read this list, why waste your time? Instead, let’s