Re: PKA records

2016-11-30 Thread Sergey Matveev
*** R. Martinho Fernandes [2016-11-30 10:50]: >I can't seem to find any up-to-date documentation on how to deploy DNS >PKA records for use with `auto-key-locate`. For me "gpg --export --export-options export-pka KEYID" works fine. -- Sergey Matveev (http://www.stargrave.org/) OpenPGP: CF60 E89A

Re: PKA records

2016-11-30 Thread Werner Koch
On Wed, 30 Nov 2016 07:16, g...@rmf.io said: > the new one that I exported only includes the key fingerprint, so it > obviously cannot be used for retrieval alone. What am I missing? Use gpg --export-options export-pka --export USERID to create resource records for use in zone files. The f

Re: pka-lookups and dnssec

2011-12-05 Thread Werner Koch
On Mon, 5 Dec 2011 16:32, w...@gnupg.org said: > gpg --verify-options pka-lookups,pka-trust-increase --verify Well, you also need the options --keyserver-options honor-pka-record,auto-key-retrieve Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: pka-lookups and dnssec

2011-12-05 Thread Werner Koch
On Mon, 5 Dec 2011 15:30, gn...@lists.grepular.com said: > I then tried verifying the output from the above command, by piping it > into this, using a gpg homedir that didn't contain my key: > > gpg --verify-options pka-lookups --verify You may want to use: gpg --verify-options pka-lookups,pk

Re: pka-lookups and dnssec

2011-12-05 Thread gnupg
On 05/12/11 13:15, Werner Koch wrote: >> verification, but if you don't have the key already, it doesn't know the >> UID associated with the key used to sign and therefore can't do the PKA >> lookup... Is there some additional command line option that I should be > > Well, PKA requires additional

Re: pka-lookups and dnssec

2011-12-05 Thread Werner Koch
On Mon, 5 Dec 2011 13:26, gn...@lists.grepular.com said: > verification, but if you don't have the key already, it doesn't know the > UID associated with the key used to sign and therefore can't do the PKA > lookup... Is there some additional command line option that I should be Well, PKA requir

Re: pka-lookups

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 10:56:13AM -0400, John W. Moore III wrote: > Throughout the 'snapshot' phase of 1.4.3 this ability was turned OFF by > default. With the release of 1.4.3 stable and the availability of > cross-certification and pka-lookup now widely available, will the > features once defau

Re: PKA

2006-01-02 Thread Jeroen Massar
Werner Koch wrote: > On Tue, 27 Dec 2005 03:44:29 +0300, Pawel Shajdo said: > >> What is PKA? Just have found in manual unknown words... > > Public Key Association > > Yeah, I know that I should write a paper on this. There is only a > simplepresentation on what PKA tries to solve > (ftp://ftp.

Re: PKA

2006-01-02 Thread Werner Koch
On Tue, 27 Dec 2005 03:44:29 +0300, Pawel Shajdo said: > What is PKA? Just have found in manual unknown words... Public Key Association Yeah, I know that I should write a paper on this. There is only a simplepresentation on what PKA tries to solve (ftp://ftp.g10code.com/people/werner/talks/pka-

Re: PKA

2005-12-29 Thread Pawel Shajdo
On Dec 29, 2005 at 16:37 +0100, Christoph Anton Mitterer wrote: > Sorry,.. was just an idea due to the comment in the source code: > "It makes use of special DNS records and notation data to associate a > mail address with an OpenPGP key." > And the only (standardized) RR that has to do with sigs I

Re: PKA

2005-12-29 Thread Christoph Anton Mitterer
Pawel Shajdo wrote: >On Dec 28, 2005 at 00:25 +0100, Christoph Anton Mitterer wrote: > > >>I'm not sure, but perhaps this utilizes the SIG resrouce record,... have >>a look at RFC 2535 about DNSSEC (http://www.ietf.org/rfc/rfc2535.txt). >> >> >Seems nothing with DNSSEC. > > Sorry,.. was j

Re: PKA

2005-12-28 Thread Pawel Shajdo
On Dec 28, 2005 at 00:25 +0100, Christoph Anton Mitterer wrote: > I'm not sure, but perhaps this utilizes the SIG resrouce record,... have > a look at RFC 2535 about DNSSEC (http://www.ietf.org/rfc/rfc2535.txt). Seems nothing with DNSSEC. IIRC, after looking into util/pka.c, this searches in DNS T

Re: PKA

2005-12-27 Thread Christoph Anton Mitterer
Pawel Shajdo wrote: Can somebody point me to RFC or IETF draft (or other info) about this special DNS recodrds? I'm not sure, but perhaps this utilizes the SIG resrouce record,... have a look at RFC 2535 about DNSSEC (http://www.ietf.org/rfc/rfc2535.txt). Perhaps David or Werner could con

Re: PKA

2005-12-27 Thread Pawel Shajdo
On Dec 27, 2005 at 16:30 -0500, John W. Moore III wrote: > -BEGIN PGP SIGNED MESSAGE- > While waiting for Werner or David; I'll share what I "know" about PKA in > 1.4.3cvs: > > * Implemented Public Key Association (PKA) trust sub model. This > is an optional trust model on top o

Re: PKA

2005-12-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pawel Shajdo wrote: > On Dec 26, 2005 at 23:21 -0500, John W. Moore III wrote: > >>>Without context it is difficult to tell. >>>My guess would be Public Key Authentication; e.g. OpenSSH. >> >>I believe your "Guess" to be correct. Since the Release

Re: PKA

2005-12-27 Thread Pawel Shajdo
On Dec 26, 2005 at 23:21 -0500, John W. Moore III wrote: > > Without context it is difficult to tell. > > My guess would be Public Key Authentication; e.g. OpenSSH. > > I believe your "Guess" to be correct. Since the Release of GnuPG 1.4.3 > *will* contain support for PKA Key retrieval (among oth

Re: PKA

2005-12-26 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John Clizbe wrote: > Without context it is difficult to tell. > > My guess would be Public Key Authentication; e.g. OpenSSH. I believe your "Guess" to be correct. Since the Release of GnuPG 1.4.3 *will* contain support for PKA Key retrieval (amon

Re: PKA

2005-12-26 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pawel Shajdo wrote: > Salve! > What is PKA? Just have found in manual unknown words... > > Vale! Without context it is difficult to tell. My guess would be Public Key Authentication; e.g. OpenSSH. Google also turned up "Private Key Access" and "Publ

RE: PKA

2005-12-26 Thread Kiefer, Sascha
Not sure: PKI - Public Key Infrastructure PKA - Public Key Application ? HTH --esskar > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pawel Shajdo > Sent: Dienstag, 27. Dezember 2005 01:44 > To: gnupg-users@gnupg.org > Subject: PKA > > > Salve! >