Re: Non email addresses in UID

2014-01-29 Thread Steve Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, 30 Jan 2014 00:22:08 + MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: > On Tuesday 28 January 2014 at 11:37:25 PM, in > , Steve Jones wrote: > > > > A more sophisticated approach > > would be for OpenPGP to include a new signatu

Re: Non email addresses in UID

2014-01-29 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 24 January 2014 at 11:08:16 PM, in , Steve Jones wrote: > I'd really like an email client > that automatically signs keys at level 1 (persona) of > anyone who replies with a signed email that quotes a > significant portion of the tex

Re: Non email addresses in UID

2014-01-29 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 28 January 2014 at 11:37:25 PM, in , Steve Jones wrote: > A more sophisticated approach > would be for OpenPGP to include a new signature type > for this purpose. There are already more than enough signature types. Wouldn't this le

MUA "automatically signs keys"? (was: Re: Non email addresses in UID)

2014-01-29 Thread Gregor Zattler
Hi Steve, gnupg users, * Steve Jones [24. Jan. 2014]: > Which reminds me that I'd really like an email client that > automatically signs keys at level 1 (persona) of anyone who replies > with a signed email that quotes a significant portion of the text I > sent, as this effectively counts as a cha

Re: Non email addresses in UID

2014-01-28 Thread Steve Jones
On Tue, 28 Jan 2014 20:13:30 +0100 Leo Gaspard wrote: > On Fri, Jan 24, 2014 at 11:08:16PM +, Steve Jones wrote: > > [...] > > > > Finally there's the possibility of explicit verification, if someone > > sends me a challenge and I publish that challenge's signature on my > > blog then that v

Re: Non email addresses in UID

2014-01-28 Thread Leo Gaspard
On Fri, Jan 24, 2014 at 11:08:16PM +, Steve Jones wrote: > [...] > > Finally there's the possibility of explicit verification, if someone > sends me a challenge and I publish that challenge's signature on my > blog then that verifies that I am in control of that private key and > can publish t

Re: Non email addresses in UID

2014-01-24 Thread Steve Jones
On Fri, 24 Jan 2014 17:16:28 -0500 Daniel Kahn Gillmor wrote: > what do you mean "complete connection security via OpenPGP"? OpenPGP > is not a stream-based communications protocol, it's a specification > of a message format and a certificate format. Inventing a new > stream-based communicatio

Re: Non email addresses in UID

2014-01-24 Thread Daniel Kahn Gillmor
On 01/24/2014 12:48 PM, Steve Jones wrote: > On Fri, 24 Jan 2014 12:15:40 -0500 Daniel Kahn Gillmor > wrote: > >> http://web.monkeysphere.info/ > > This looks pretty cool, and does cover some of the things I've been > thinking about. I've been wondering about communications secured with > OpenP

Re: Non email addresses in UID

2014-01-24 Thread Hans-Christoph Steiner
I think it makes a lot of sense to be able to associate more things with OpenPGP keys. I'm particularly interested in seeing OTR keys and XMPP identities in OpenPGP keys. .hc On 01/23/2014 05:50 PM, Steve Jones wrote: > I've been thinking about UIDs in keys, rfc4880 section 5.1 says that by >

Re: Non email addresses in UID

2014-01-24 Thread Steve Jones
On Fri, 24 Jan 2014 12:15:40 -0500 Daniel Kahn Gillmor wrote: > There are already systems that make use of the flexibility in this > field. For example SSH hosts can publish their RSA host key in an > OpenPGP certificate using the monkeysphere (i'm a contributor to the > monkeysphere project): >

Re: Non email addresses in UID

2014-01-24 Thread Daniel Kahn Gillmor
On 01/23/2014 05:50 PM, Steve Jones wrote: > I've been thinking about UIDs in keys, rfc4880 section 5.1 says that by > convention a UID is an rfc2822 email address but this is not a > requirement[1]. Gnupg does enforce that restriction unless you explicitly > disable it. It would seem to make se

Non email addresses in UID

2014-01-23 Thread Steve Jones
I've been thinking about UIDs in keys, rfc4880 section 5.1 says that by convention a UID is an rfc2822 email address but this is not a requirement[1]. Gnupg does enforce that restriction unless you explicitly disable it. It would seem to make sense to include other strings that can identify a us