Re: Proof of email ownership

2005-08-11 Thread Marco d'Itri
How does this interact with DKIM? -- ciao, Marco ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Proof of email ownership

2005-08-09 Thread Werner Koch
On Mon, 8 Aug 2005 20:34:33 +0200, Marco d'Itri said: > How does this interact with DKIM? DKIM does not work. For example, their canonicalization is broken and one can easily fake a MIME message. Shalom-Salam, Werner ___ Gnupg-users mailing li

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 08 Aug 2005 14:24:50 +0200, Simon Josefsson said: > gpg: can't put notation data into v3 (PGP 2.x style) signatures > [EMAIL PROTECTED]:~$ > Is my key unusable with this scheme? For better compatibility with pre OpenPGP implementations, gpg creates v3 signatures with v3 keys (yours). v3

Re: Proof of email ownership

2005-08-08 Thread Simon Josefsson
Werner Koch <[EMAIL PROTECTED]> writes: > To create a signature on an email (or any other data) you would use: > > gpg -s [EMAIL PROTECTED]@example.org foo I get this: [EMAIL PROTECTED]:~$ gpg -s [EMAIL PROTECTED]@extundo.com foo You need a passphrase to unlock the secret key for user: “Simon

Re: Proof of email ownership

2005-08-08 Thread Simon Josefsson
Werner Koch <[EMAIL PROTECTED]> writes: > On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said: > >> Do these TXT records support having multiple keys associated with the >> same email address? For example, I use D7CBA633 for "everyday" signing >> and encryption, and 24EEB426 for tin foil hat

Re: Proof of email ownership

2005-08-08 Thread Mads Laursen
On 07/08/05 14.48, Werner Koch wrote: > Hi! > > Let me note that I am currently working on a simplified key validation > scheme. The basic idea is to connect a signature to an DNS entry. Is this only for signatures, or will there also be a method to put this notation in a key, or would that be u

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said: > Do these TXT records support having multiple keys associated with the > same email address? For example, I use D7CBA633 for "everyday" signing > and encryption, and 24EEB426 for tin foil hat applications. No. I can be extended to allow

Re: Proof of email ownership

2005-08-08 Thread Bernd Jendrissek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 07, 2005 at 02:48:56PM +0200, Werner Koch wrote: > gpg detects that foo.gpg has the notation key [EMAIL PROTECTED] > and takes its value ([EMAIL PROTECTED]) to run a DNS query like: > > $ host -t txt werner._pka.example.org > werner._p

[Fwd: Re: Proof of email ownership]

2005-08-08 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Forwarded since it seems useful - Original Message Subject: Re: Proof of email ownership Date: Mon, 08 Aug 2005 09:07:24 +0200 From: Werner Koch <[EMAIL PROTECTED]> To: Alphax <[EMAIL PROTECTED]> CC: gnupg-use

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Sun, 07 Aug 2005 22:02:44 +0200, Jeroen Massar said: > - DNS is not a directory for random information It is not random information it just extends the domain system by local parts. Anyway, DNS is nowadays not anymore as for what it has been designed. > - Don't overload TXT records (though

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 08 Aug 2005 00:11:26 +0930, Alphax said: > Your other assumption is that everyone has continuous and unrestricted > (no proxies, firewalls) internet access. I can't even get GPG to work To clarify this: It is NOT a change of the trust modeel but an optional feature. Without access to th

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Sun, 7 Aug 2005 07:17:13 -0700 (PDT), S K said: > How would this work out for people who do not have > control over the DNS record of domains? Best examples > are free email services like hotmail and gmail? Convince them to have a feature for upload a key or a key's fingerprint into the user s

Re: Proof of email ownership

2005-08-07 Thread Jeroen Massar
Werner Koch wrote: > gpg -s [EMAIL PROTECTED]@example.org foo This parts looks good... > gpg detects that foo.gpg has the notation key pka-address at gnupg.org > and takes its value (werner at example.org) to run a DNS query like: > > $ host -t txt werner._pka.example.org > werner._pka.ex

Re: Proof of email ownership

2005-08-07 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Werner Koch wrote: > Hi! > > Let me note that I am currently working on a simplified key validation > scheme. The basic idea is to connect a signature to an DNS entry. > > Our assumption is that DNS is secure and unforgeable - as of now it is >

Re: Proof of email ownership

2005-08-07 Thread S K
How would this work out for people who do not have control over the DNS record of domains? Best examples are free email services like hotmail and gmail? -SK --- Werner Koch <[EMAIL PROTECTED]> wrote: > Hi! > > Let me note that I am currently working on a > simplified key validation > scheme.

Re: Proof of email ownership

2005-08-07 Thread Werner Koch
Hi! Let me note that I am currently working on a simplified key validation scheme. The basic idea is to connect a signature to an DNS entry. Our assumption is that DNS is secure and unforgeable - as of now it is not but eventually DNSSEC will get deployed to solve this and many other problems.

Re: Proof of email ownership

2005-08-06 Thread David Srbecky
Hello, Thank you all you for you replys! That's exactly what I was looking for! Thank you, David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Proof of email ownership

2005-08-06 Thread Samuel ]slund
On Sat, Aug 06, 2005 at 08:36:02AM +0100, Adam Cripps wrote: > On 8/6/05, Samuel ]slund <[EMAIL PROTECTED]> wrote: > > On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote: > > > Hello, > > > Keywords you are looking for include "web of thrust" and "key signing". > > > > Did you mean to

Re: Proof of email ownership

2005-08-06 Thread Adam Cripps
On 8/6/05, Samuel ]slund <[EMAIL PROTECTED]> wrote: > On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote: > > Hello, > Keywords you are looking for include "web of thrust" and "key signing". > Did you mean to say "web of thrust"? Kind of funny that image. Adam -- http://www.monk

Re: Proof of email ownership

2005-08-05 Thread Michael Daigle
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 In reply to David Srbecky's message sent 2005-08-05 17:36: > I just installed GnuPG to Thunderbird, created a key pair and > uploaded it to a keyserver. I have expected to receive some mail > designed to verify that I really own the email address

Re: Proof of email ownership

2005-08-05 Thread Samuel ]slund
On Fri, Aug 05, 2005 at 11:36:49PM +0200, David Srbecky wrote: > Hello, > > I just installed GnuPG to Thunderbird, created a key pair and uploaded > it to a keyserver. I have expected to receive some mail designed to > verify that I really own the email address (similar to the one that just > r

Re: Proof of email ownership

2005-08-05 Thread Patrick Dickey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Srbecky wrote: > Hello, > > I just installed GnuPG to Thunderbird, created a key pair and > uploaded it to a keyserver. I have expected to receive some mail > designed to verify that I really own the email address (similar to > the one that jus