Re: WKD for GitHub pages

2021-01-09 Thread Neal H. Walfield
Hi Stefan, On Fri, 08 Jan 2021 23:05:52 +0100, Stefan Claas via Gnupg-users wrote: > On Fri, Jan 8, 2021 at 10:21 PM Stefan Claas > wrote: > > > I guess the only way to fix it (for many people) would be > > that, as of my understanding (now) the WKD check > > and SSL cert check would be a bit mo

Binding of an encryption key to an e-mail address

2021-01-09 Thread Annie Yousar via Gnupg-users
Hi all, if a user A has a secret (signing/certification) key K and two e-mail adresses A1 and A2, the OpenPGP key consists of the following packets: * public key K packet * user ID A1 packet * signature packet over K and A1 signed with K * user ID A2 packet * signature packet over K and

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 11:37 AM Neal H. Walfield wrote: > It appears that gpg is trying the advanced lookup method, gets an > error, and then doesn't fallback to the direct lookup method. This is > consistent with the I-D: > >3.1. Key Discovery > >... > >There are two variants on ho

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 2:37 PM Stefan Claas wrote: > Hi Neal, > > thanks for the reply, much appreciated! Simply said, for the average > user like me, I believe GitHub is doing it right, because it is a > valid option according to their SSL cert data, and Werner simply > overlooked this option. I

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Fri, Jan 8, 2021 at 11:34 PM Stefan Claas wrote: > But (sorry to say this here on the GnuPG ML) good news is > I just tested it with an older version of sequoia-pgp and guess > what it works for me. :-) > > sq wkd get ste...@sac001.github.io > -BEGIN PGP PUBLIC KEY BLOCK- > Comment: 37

Re: WKD for GitHub pages

2021-01-09 Thread Ingo Klöcker
On Samstag, 9. Januar 2021 15:43:14 CET Stefan Claas via Gnupg-users wrote: > On Sat, Jan 9, 2021 at 2:37 PM Stefan Claas > wrote: > > Hi Neal, > > > > thanks for the reply, much appreciated! Simply said, for the average > > user like me, I believe GitHub is doing it right, because it is a > > va

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 7:27 PM Ingo Klöcker wrote: > > On Samstag, 9. Januar 2021 15:43:14 CET Stefan Claas via Gnupg-users wrote: > > Example: If I would be the host master of the domain bund.de with it's > > many subdomains and authorities would request that WKD, as an > > inexpensive inhouse o

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 8:08 PM Stefan Claas wrote: > host sac001.github.io > sac001.github.io has address 185.199.111.153 > sac001.github.io has address 185.199.109.153 > sac001.github.io has address 185.199.110.153 > sac001.github.io has address 185.199.108.153 > > works as well and why can sequ

Re: Binding of an encryption key to an e-mail address

2021-01-09 Thread Ángel
On 2021-01-09 at 11:44 +0100, Annie Yousar via Gnupg-users wrote: > How to create a signature packet over K, A1 and E1 signed with K in > GnuPG? Hello Ann The best way would probably be to use two pgp keys: (K1, A1, E1) and (K2, A2, E2) You could have two keys (K, A1, E1) and (K, A2, E2) and sel

Re: WKD for GitHub pages

2021-01-09 Thread Ingo Klöcker
On Samstag, 9. Januar 2021 20:50:54 CET Stefan Claas via Gnupg-users wrote: > On Sat, Jan 9, 2021 at 8:08 PM Stefan Claas > wrote: > > host sac001.github.io > > sac001.github.io has address 185.199.111.153 > > sac001.github.io has address 185.199.109.153 > > sac001.github.io has address 185.199.11

Re: WKD for GitHub pages

2021-01-09 Thread Ángel
On 2021-01-09 at 14:37 +0100, Stefan Claas via Gnupg-users wrote: > I believe GitHub is doing it right, because it is a > valid option according to their SSL cert data, and Werner simply > overlooked this option. It is not. A certificate for *.github.io doesn't cover openpgpkey.sac001.github.io S

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 11:09 PM Ingo Klöcker wrote: > > On Samstag, 9. Januar 2021 20:50:54 CET Stefan Claas via Gnupg-users wrote: > > On Sat, Jan 9, 2021 at 8:08 PM Stefan Claas > > wrote: > > > host sac001.github.io > > > sac001.github.io has address 185.199.111.153 > > > sac001.github.io has

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 11:42 PM Ángel wrote: > > On 2021-01-09 at 14:37 +0100, Stefan Claas via Gnupg-users wrote: > > I believe GitHub is doing it right, because it is a > > valid option according to their SSL cert data, and Werner simply > > overlooked this option. > > It is not. A certificate f

Re: WKD for GitHub pages

2021-01-09 Thread Stefan Claas via Gnupg-users
On Sat, Jan 9, 2021 at 11:49 PM Stefan Claas wrote: > Like I said in my previous reply to Ingo, It would be nice if GitHub staff > would > see this thread and talk with Werner. Well, I just wrote GitHub support and asked if their staff can check this thread, which I linked to in my message. Le