How does this interact with DKIM?
--
ciao,
Marco
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users
On Mon, 8 Aug 2005 20:34:33 +0200, Marco d'Itri said:
> How does this interact with DKIM?
DKIM does not work. For example, their canonicalization is broken and
one can easily fake a MIME message.
Shalom-Salam,
Werner
___
Gnupg-users mailing li
On Mon, 08 Aug 2005 14:24:50 +0200, Simon Josefsson said:
> gpg: can't put notation data into v3 (PGP 2.x style) signatures
> [EMAIL PROTECTED]:~$
> Is my key unusable with this scheme?
For better compatibility with pre OpenPGP implementations, gpg creates
v3 signatures with v3 keys (yours). v3
Werner Koch <[EMAIL PROTECTED]> writes:
> To create a signature on an email (or any other data) you would use:
>
> gpg -s [EMAIL PROTECTED]@example.org foo
I get this:
[EMAIL PROTECTED]:~$ gpg -s [EMAIL PROTECTED]@extundo.com foo
You need a passphrase to unlock the secret key for
user: “Simon
Werner Koch <[EMAIL PROTECTED]> writes:
> On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said:
>
>> Do these TXT records support having multiple keys associated with the
>> same email address? For example, I use D7CBA633 for "everyday" signing
>> and encryption, and 24EEB426 for tin foil hat
On 07/08/05 14.48, Werner Koch wrote:
> Hi!
>
> Let me note that I am currently working on a simplified key validation
> scheme. The basic idea is to connect a signature to an DNS entry.
Is this only for signatures, or will there also be a method to put
this notation in a key, or would that be u
On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said:
> Do these TXT records support having multiple keys associated with the
> same email address? For example, I use D7CBA633 for "everyday" signing
> and encryption, and 24EEB426 for tin foil hat applications.
No. I can be extended to allow
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, Aug 07, 2005 at 02:48:56PM +0200, Werner Koch wrote:
> gpg detects that foo.gpg has the notation key [EMAIL PROTECTED]
> and takes its value ([EMAIL PROTECTED]) to run a DNS query like:
>
> $ host -t txt werner._pka.example.org
> werner._p
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
Forwarded since it seems useful
- Original Message
Subject: Re: Proof of email ownership
Date: Mon, 08 Aug 2005 09:07:24 +0200
From: Werner Koch <[EMAIL PROTECTED]>
To: Alphax <[EMAIL PROTECTED]>
CC: gnupg-use
On Sun, 07 Aug 2005 22:02:44 +0200, Jeroen Massar said:
> - DNS is not a directory for random information
It is not random information it just extends the domain system by
local parts. Anyway, DNS is nowadays not anymore as for what it has
been designed.
> - Don't overload TXT records (though
On Mon, 08 Aug 2005 00:11:26 +0930, Alphax said:
> Your other assumption is that everyone has continuous and unrestricted
> (no proxies, firewalls) internet access. I can't even get GPG to work
To clarify this: It is NOT a change of the trust modeel but an
optional feature. Without access to th
On Sun, 7 Aug 2005 07:17:13 -0700 (PDT), S K said:
> How would this work out for people who do not have
> control over the DNS record of domains? Best examples
> are free email services like hotmail and gmail?
Convince them to have a feature for upload a key or a key's
fingerprint into the user s
Werner Koch wrote:
> gpg -s [EMAIL PROTECTED]@example.org foo
This parts looks good...
> gpg detects that foo.gpg has the notation key pka-address at gnupg.org
> and takes its value (werner at example.org) to run a DNS query like:
>
> $ host -t txt werner._pka.example.org
> werner._pka.ex
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
Werner Koch wrote:
> Hi!
>
> Let me note that I am currently working on a simplified key validation
> scheme. The basic idea is to connect a signature to an DNS entry.
>
> Our assumption is that DNS is secure and unforgeable - as of now it is
>
How would this work out for people who do not have
control over the DNS record of domains? Best examples
are free email services like hotmail and gmail?
-SK
--- Werner Koch <[EMAIL PROTECTED]> wrote:
> Hi!
>
> Let me note that I am currently working on a
> simplified key validation
> scheme.
Hi!
Let me note that I am currently working on a simplified key validation
scheme. The basic idea is to connect a signature to an DNS entry.
Our assumption is that DNS is secure and unforgeable - as of now it is
not but eventually DNSSEC will get deployed to solve this and many other
problems.
Hello,
Thank you all you for you replys! That's exactly what I was looking for!
Thank you,
David
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users
On Sat, Aug 06, 2005 at 08:36:02AM +0100, Adam Cripps wrote:
> On 8/6/05, Samuel ]slund <[EMAIL PROTECTED]> wrote:
> > On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote:
> > > Hello,
>
> > Keywords you are looking for include "web of thrust" and "key signing".
> >
>
> Did you mean to
On 8/6/05, Samuel ]slund <[EMAIL PROTECTED]> wrote:
> On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote:
> > Hello,
> Keywords you are looking for include "web of thrust" and "key signing".
>
Did you mean to say "web of thrust"? Kind of funny that image.
Adam
--
http://www.monk
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
In reply to David Srbecky's message sent 2005-08-05 17:36:
> I just installed GnuPG to Thunderbird, created a key pair and
> uploaded it to a keyserver. I have expected to receive some mail
> designed to verify that I really own the email address
On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote:
> Hello,
>
> I just installed GnuPG to Thunderbird, created a key pair and uploaded
> it to a keyserver. I have expected to receive some mail designed to
> verify that I really own the email address (similar to the one that just
> r
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David Srbecky wrote:
> Hello,
>
> I just installed GnuPG to Thunderbird, created a key pair and
> uploaded it to a keyserver. I have expected to receive some mail
> designed to verify that I really own the email address (similar to
> the one that jus
22 matches
Mail list logo