Re: Key distribution via NFC

2014-07-06 Thread NdK
Il 04/07/2014 05:54, Robert J. Hansen ha scritto: > If someone asks you for your certificate, you don't have to > trade a SHA-1 fingerprint -- just put down your keychain and let the > person wave a cell phone over it. Just place in the tag the URL where to retrieve your key. > Obviously there ar

Re: Key distribution via NFC

2014-07-06 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 4 July 2014 at 6:24:53 AM, in , Robert J. Hansen wrote: > NFC is significantly more convenient than > fumbling with your phone's camera app, taking a > snapshot, etc. Wave it and it's done. NFC has some > interesting human interface

Re: Key distribution via NFC

2014-07-06 Thread The Fuzzy Whirlpool Thunderstorm
It seems that APG and OpenKeychain on Android supports GPG key exchange via NFC just like BBM pin exchange via QRcode. pgp8ZNOhdJvvE.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinf

Re: Key distribution via NFC

2014-07-04 Thread Mark H. Wood
First thought: wow, someone came up with an NFC application that I would actually accept as not obviously horrible security. Second thought: you could just keep your public key in a saved TXT and just send it to the other's phone that way. Even my unsmart phone with the 4.5cm screen can do that

Re: Key distribution via NFC

2014-07-03 Thread Robert J. Hansen
> Read-only you say? Given I've only been playing around with these things for the last few hours, you'll have to forgive the occasional newbie mistake. :) But damn, they're *neat*! ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg

Re: Key distribution via NFC

2014-07-03 Thread Johan Wevers
On 04-07-2014 6:18, Robert J. Hansen wrote: > But what if giving them your key was as simple as putting down a > read-only NFC token and telling people, "there, scan that"? Read-only you say? NFC writers are cheap (they were even sold out here when someone foud out you could use them to top-up th

Re: Key distribution via NFC

2014-07-03 Thread Daniel Kahn Gillmor
On 07/03/2014 11:54 PM, Robert J. Hansen wrote: > the ability to store 400 bytes, to > access it quickly and easily, and all in a tag that costs less than a > dollar and can be read with almost any modern smartphone, is kind of cool. it is cool indeed. You can also get all of the above properties

Re: Key distribution via NFC

2014-07-03 Thread Robert J. Hansen
> You can also get all of the above properties... *Almost*. NFC is significantly more convenient than fumbling with your phone's camera app, taking a snapshot, etc. Wave it and it's done. NFC has some interesting human interface engineering behind it. signature.asc Description: OpenPGP digit

Re: Key distribution via NFC

2014-07-03 Thread Robert J. Hansen
> 1) might it be possible to combine several of these storage devices > (reading them one after the other) to add up their capacity? Probably, but once you've got a dozen of these things they sort of stop being a convenient form factor. :) > 2) wouldn't it be enough to transfer the mainkey? Or

Re: Key distribution via NFC

2014-07-03 Thread Robert J. Hansen
> This is too large to store an RSA or DSA2 certificate, unfortunately. Too *small*. Sorry. Time for me to go drink coffee straight from the pot. Also, for Americans, happy Fourth of July. :) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http:

Re: Key distribution via NFC

2014-07-03 Thread Hauke Laging
Am Do 03.07.2014, 23:54:39 schrieb Robert J. Hansen: > Bring it close > to a mobile phone and presto, bang, it can access the 400 bytes. > > This is too large to store an RSA or DSA2 certificate, unfortunately. I don't even have a smartphone... but 1) might it be possible to combine several of

Key distribution via NFC

2014-07-03 Thread Robert J. Hansen
A good friend just gave me a handful of NFC tags that are capable of storing about 400 bytes. It's a convenient form factor: a cardboard disk with an adherent backing, perhaps 2.5cm across. Bring it close to a mobile phone and presto, bang, it can access the 400 bytes. This is too large to store