Re: Proof of email ownership

2005-08-07 Thread Werner Koch
Hi! Let me note that I am currently working on a simplified key validation scheme. The basic idea is to connect a signature to an DNS entry. Our assumption is that DNS is secure and unforgeable - as of now it is not but eventually DNSSEC will get deployed to solve this and many other problems.

Re: Save signature in mail headers

2005-08-07 Thread Werner Koch
On Fri, 05 Aug 2005 23:43:00 +0200, David Srbecky said: > I would like to sign all my mail, but I do not want to annoy people that > have incompatible e-mail clients with extra attachment file or signature > in the text of the message. There are at least three reasons against this: 1. It is hard

Re: Proof of email ownership

2005-08-07 Thread S K
How would this work out for people who do not have control over the DNS record of domains? Best examples are free email services like hotmail and gmail? -SK --- Werner Koch <[EMAIL PROTECTED]> wrote: > Hi! > > Let me note that I am currently working on a > simplified key validation > scheme.

Re: Proof of email ownership

2005-08-07 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Werner Koch wrote: > Hi! > > Let me note that I am currently working on a simplified key validation > scheme. The basic idea is to connect a signature to an DNS entry. > > Our assumption is that DNS is secure and unforgeable - as of now it is >

Feature request: Detect whether recipient has a public key

2005-08-07 Thread David Srbecky
Related to: Save signature in mail headers Is it possible to send the signature in mail headers? Ok, I got other solution: I think it is safe to assume that if user has public key than he has compatible MUA or at least he will not mind being send signatures. What I want is option to try impor

Feature request: Show Photo ID

2005-08-07 Thread David Srbecky
Hello, How difficult is it to show Photo ID if available? See http://tecwizards.de/mozilla/messagefaces/header-example.png David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Feature request: Automatically import public keys

2005-08-07 Thread David Srbecky
Hello, Enigmail is great, but I find that public key import is very repetitive and unnecessary action. Could Enigmail just try to import public keys automatically for incoming mail? David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lis

Feature request: Import public keys for all contacts in the address book

2005-08-07 Thread David Srbecky
This could be especially useful for new users. (Like me :-) ) David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Feature request: Show whether e-mail of user is verified

2005-08-07 Thread David Srbecky
Related to: Proof of email ownership There are a few robots that verify that user owns the e-mail. There are a many more UNTRUSTED IDs than TRUSTED in my list. If enigmail could specify whether the ID has been signed by robot, it would provide significantly more information. PS: A configurable l

Feature requests: SORRY!!! - WRONG maillist

2005-08-07 Thread David Srbecky
I very sorry!! I had a very creative moment, but I did not realize that I am sending mails to the wrong maillist - I should stop using "Edit As New..." :-( Sorry!!! David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org

more than one message digest per signed message?

2005-08-07 Thread Thomas Kuehne
Is it possible to use more than one message digest when signing a message with GnuPG? gpg --digest MD5 --digest SHA512 --clearsign test.txt -> used digest SHA512 gpg --digest MD5,SHA512 --clearsign test.txt -> gpg: selected digest algorithm is invalid gpg --digest "MD5 SHA512" --clearsign test.t

Re: Proof of email ownership

2005-08-07 Thread Jeroen Massar
Werner Koch wrote: > gpg -s [EMAIL PROTECTED]@example.org foo This parts looks good... > gpg detects that foo.gpg has the notation key pka-address at gnupg.org > and takes its value (werner at example.org) to run a DNS query like: > > $ host -t txt werner._pka.example.org > werner._pka.ex

new (2005-08-07) keyanalyze results (+sigcheck)

2005-08-07 Thread Jason Harris
New keyanalyze results are available at: http://keyserver.kjsl.com/~jharris/ka/2005-08-07/ Signatures are now being checked using keyanalyze+sigcheck: http://dtype.org/~aaronl/ Earlier reports are also available, for comparison: http://keyserver.kjsl.com/~jharris/ka/ Even earlier month