From nobody Fri Jun 7 09:59:29 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92AFF12011C for ; Fri, 7 Jun 2019 09:59:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=protonmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D0xTxfCPJIDs for ; Fri, 7 Jun 2019 09:59:25 -0700 (PDT) Received: from mail-40132.protonmail.ch (mail-40132.protonmail.ch [185.70.40.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEDA11200DB for ; Fri, 7 Jun 2019 09:59:22 -0700 (PDT) Date: Fri, 07 Jun 2019 16:59:15 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1559926760; bh=xDelo/j0XSNgm+WajEBHcQUJTXD1FbpQ6tIMUkoMWrA=; h=Date:To:From:Cc:Reply-To:Subject:In-Reply-To:References: Feedback-ID:From; b=ayPpCFGAXf3GF8Zu526gwyN0SRaZN7rA3J4Bm1Q0sSYzWUJf10FRAFI6NVckjj/BW WVchWfZZj1793sqZQipZab8MAt1ms/34oiyVcNuw1eBys745idbE/BduJm3rofXdC7 pNutjUbNBIAJ/NgLBLC6LdtHGextSO2/I7DpwDVo= To: Heiko Stamer From: Daniel Huigens Cc: "openpgp@ietf.org" Reply-To: Daniel Huigens Message-ID: In-Reply-To: <02d3c87e-f280-ff7f-5bee-d43c7b763546@gmx.net> References: <87sgvh1ugy.fsf@wheatstone.g10code.de> <871s1tyvkl.fsf@wheatstone.g10code.de> <02d3c87e-f280-ff7f-5bee-d43c7b763546@gmx.net> Feedback-ID: 2O-EbwvyAhS-6lLY8Plw88haDPLqZjDpASBCZJZlvdyh2nVaeeg1pCY1IfQd3olovlIUpCF_XMKGhUP1haiY2Q==:Ext:ProtonMail MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [openpgp] v5 sample key X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jun 2019 16:59:28 -0000 On 30 April 2019 23:28, Heiko Stamer wrote: > I've attached a detached v5 signature of this key for testing purposes. It seems this signature didn't hash the 6 zero bytes from the new fields de= scribed at https://tools.ietf.org/html/draft-ietf-openpgp-rfc4880bis-07#pag= e-44, right? (I'm trying to implement V5 signatures in OpenPGP.js.) Best, Daniel From nobody Fri Jun 7 12:52:55 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4D96120258 for ; Fri, 7 Jun 2019 12:52:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VZPICJYcs8yF for ; Fri, 7 Jun 2019 12:52:51 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 324AC120255 for ; Fri, 7 Jun 2019 12:52:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1559937165; bh=2dDz5a3LXH9lzpNl9oBirffTDfzUiJzrp6aC/A0u4qk=; h=X-UI-Sender-Class:Subject:To:Cc:References:From:Date:In-Reply-To; b=fJnsA3Yqk/kYpl+ZFHkS0vPrtVUtlhlfzjE4t92Sw2LP5TWhxP09Sc4IHL2Og64j1 G96Lfayn8sLYOuBB9VWDmFfH/SkZ59azbMNMzTUpyQ6WaQV1RzmrL7ixZHysdVZIeX Os+Uif4mJsCPlA2RB5Aa+NrOmmboT88Q04ujlQRM= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.178.30] ([80.132.227.94]) by mail.gmx.com (mrgmx105 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MKbkC-1hGa8m35Dg-00KumE; Fri, 07 Jun 2019 21:52:44 +0200 To: Daniel Huigens Cc: "openpgp@ietf.org" References: <87sgvh1ugy.fsf@wheatstone.g10code.de> <871s1tyvkl.fsf@wheatstone.g10code.de> <02d3c87e-f280-ff7f-5bee-d43c7b763546@gmx.net> From: Heiko Stamer Openpgp: preference=signencrypt Autocrypt: addr=HeikoStamer@gmx.net; prefer-encrypt=mutual; keydata= mQGiBDdYKNkRBACRdsFzaQn0HChOX38WHXlIYcNZAAxBQxa7gdmPXTUK+tgwQuwAr/XViQxn ExKwyOteRhwHZNSYdoKPlCOJ3c3FWCKAdflINr53NvN/qnnaF+3M1HaluiwVdfHD9a0+k7fd NFZMq2bTpzSCQBsPGipSK0K8ET8UPrXm54pXhqYL2wCgsuMBOv64bmg2zjg6vHSTKADGykcD /Agjoa7y7Cpifk4WEKDKu8nlrE9OFOJppjZ9bdJedrmZq5A/jHr35UOgbZItTmgBiz7bfMLq 7HD05ZQ3BplBmmiE0412f55GadCjN4vvnCdTqZ/ewzWdz/rzQGaJm9IvW6rupuFgrTx0GJhf we7cr6GQQo0nqA0LMCyhGHQASC56A/9NOroBzLM6wl9QlE9lybxd3cxI2UnrfHIu63tklFKF vL1XnjyJ4YR0sDs6/f56JbtEGUKTCI7ZAw+241Va4MrbDVmmsGJjQBcKxNbHDfkkjoJ9NBwr pUo2nMT3BWyKHCfnMqoyT+nN04b0Em1ffbhptKiLJSeY1mcPxvA1h7PrKbQiSGVpa28gU3Rh bWVyIDxoZWlrb3N0YW1lckBnbXgubmV0Poh4BBMRAgA4AhsDAh4BAheAFiEEdvcwETKdJ9uN fD+XT1hOuPsr4U8FAlzqvfMFCwkIBwIGFQoJCAsCBBYCAwEACgkQT1hOuPsr4U8jZQCfbz7N emwAJ2OdrBP9mmsySktb4IQAnRWJOYy4bH3R42nh6KCUkbDXQoNhuQMNBDdYKtkQDACuGU2S WXmjpoyGIX/UHze60OolxBdtKzhvDZHhy1Sz8NNrdkI3ozuYOMxkKZZLTw/iQigVNQfwy+5f AUw6KaH8OPnwInqyeguI6PwG0qQK2cWlSTZDlTW8B2D3Qpjt8sYnnjGEIGKGb7ZAUgODmWYd sS35otyEQT0Un/kRIqjyQcvWgNH++t+LypXUxu0eD0dlD/kx46TP9kqTYsr/8vWWhD2J98x0 ZFrFMN8QDCIhO9x3p+qPyfSiAdnuI4iN1RYsKtC2ikb+cIc5bYysnRots1anAy3Pd5Q8bFtj lzxPPRh90v/Yq5RM/3IgbsbS0zDI0ldznld+DInezLs/EROsITmmbXrhIAHC8TjcXtxWR3ht nFLnIgmQ3Rag0bQesNF4Y5bXSGcw/MxwWcm6EXwcbm7Uc64k8YxXMYyNy+XX/bi1o7r5JdH0 mKUFeXTF9WLrNpF4jBylHk1RNDbR6kp6M87vPJeg/nQh19ItQQxYJGYu9KBhBGhFtDUIAyLT nTcAAwUL/2tHe52rFeCVvZo7RZ5SQy/aclx7hnPsvb3yTXcvg5c7hweOL7Zfsh/XnE3acRO0 YAfGb0LxMFJlfpHgcPuTZEd5rPgJz68GccACBPw8Z8MgQEBE5H/UiAR/HM9AQmEN+wfjeDlv 6ZGElmnY59gYIuCGUVsqw5pwCCsLBs3xlMTyCiNwDHERRao3YTGhaNy9hsCdqNHQcXdSzdF6 OtvfMnXI67QGyiNcbjVwXwQHlGAsxo4O3FMOl138o1Oa00JMSk7td8bClMAp7Hu4zrw533TZ 2Avp+6OFjUAQ4U4hdEDGePNm2hbQinKnUCd30PboqIdZDmYq4SSeNMbWKwy3Etx/a0GX39F/ gnjmveBHSWGGB+wSKcrK3yfXNXMa4OW683m/aH1msS0L0SFwbm2w7XdALp0DCV031x1JoGAn c0mVcstbVM7KNUGnCOA9D4USKHrj/IoZVoapx0b+bWPFHtfLhcm2lSDlq7F140DlQVL1xZmA nPcpLyXMmEmnS2JCZYhGBBgRAgAGBQI3WCrZAAoJEE9YTrj7K+FPcRMAnige4x75lK1p7sbK sdhZb6tv4CJPAKCpDqRn9o7nfvLlouXNaIR1nri7cw== Message-ID: <753c8251-c329-0e97-de7e-7ec7cf91c581@gmx.net> Date: Fri, 7 Jun 2019 21:52:33 +0200 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/mixed; boundary="------------4C8CD52E7B6E79A5DC537F09" Content-Language: en-US X-Provags-ID: V03:K1:UfoSpD/9yEXuMyEAHb/AWY1g50CGAByt+pkEfKBzivNLfAqD4mT y1+ZNbLAinxHd2/q/jgU0ZfoZZZcleEUd0fH7LIFX8v1Nx3B9Vgh5B+KMAk5ipVFdWWBCnM U5D5YwqqAOHKomY/CSSkLRaIK3PwJG31Zw9zzaQ+dY7mY1me1mqPhHxmHHXDqTbMOc5tWSD e/8GJRNzyNERhaRFNCSlA== X-UI-Out-Filterresults: notjunk:1;V03:K0:pdNLhYSG/2Y=:Bt3YLlSs654lgWceBEwU6Q R49p1EDN4TPSNbXMnfHalQoAAREZHSm5UtxTel2w9kJyc0PsCIc56+pkF5NoMLJeheRVGjb5q JqV37i8gWGn/Tt44eaejQDTKfCefcgrxDHR/q1hn802XpMdxjiR//z6NdeDz8PjGeehLMJzQ2 EyU6sMGSjHQcQHbDqUju99LWxGbNjvzryiXGiOR+36Kkr1coi/vHeKVby4pUKhMi8t0IevyvS bleVZfN7x+GX2XwUPIP97/GuhoGQ1tEf61Y/Yy1XEofnIyBhLyjxnqCshAJ6XoVzfr8T1zQvt 0j6Y5VFKf3Aetq6UohOioDur4rClP2TBJwAH9WpokGJ5CgUCDN6BiPr1iJ6vQ8lB6Dsyw8pMc LEXZbxSaCL/zvI8UF0c3Q8kYslqgnYqqU6DqjlsGcPSwqukn92de4F49zHXKZHPOxJzl5QsBt zSgKTUHjIb7NMwpggwD4wvtm0IHiqTCCNCcB9LWGn0U0ZU/Ozf8YAndkLwL0fep0CIrDQkYn5 Z4oTHxH9n6Wk/61zvy4qkjyFr84aGHH/fT7xuVwF3gT4EqYXYyx2+BmenV8ZbTcJslWiAH84P qMbGEAhlJt2bThS4FgBonIUptuM4XTOYkT+WKjUXz/+d7loAm5g/6nQEPeVj+6cxqQIq8BILM s29FQeLE/a8KRT+B0sk+FLwgKTKNFyhlzvW1Mn8XjQS1x4r/sjQICR5Um0FX+JSIw4irxoPzm dboVrvmniea/+XLwO1+dbr6+qE17cYYeWretb5A14XXd8lEItM+8cpCDhO69ZQ2qo7cLY9AjZ rSf99C2HJO/IbP08rxrvYjo76gqqteHCCg6QVgDVHRezIG8F2wWa0xiPJsU3D63pAg4VaHXsv 3G/pHq4JaV+c1PBYmtfRUelkcxtV3yJA9JObnAVhdj4mHgVKUmVygQXrJ4k4mElOssvpAXjZm 9uGwBdvrznO59e1hEJw1JqybBvcotYRs= Archived-At: Subject: Re: [openpgp] v5 sample key X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jun 2019 19:52:54 -0000 This is a multi-part message in MIME format. --------------4C8CD52E7B6E79A5DC537F09 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 07 June 2019 18:59, Daniel Huigens wrote: > It seems this signature didn't hash the 6 zero bytes from the new fields= described at https://tools.ietf.org/html/draft-ietf-openpgp-rfc4880bis-07= #page-44, right? Yes. It was generated before I recognized this obscurity of v5 signatures. I have attached a corrected v5 signature on the same file. Good luck. =2D- Heiko --------------4C8CD52E7B6E79A5DC537F09 Content-Type: text/plain; charset=UTF-8; name="dkgpg-1.1.1.tar.gz.asc" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="dkgpg-1.1.1.tar.gz.asc" LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IExpYlRNQ0cgMS40LjAN Cg0Kd244RkFCWUtBREgvQUFBQUJRSmMrci9FL3dBQUFDSWhCUmswZThtSEpHUUNYNW5mUHNM Z0FBN1ppRWlTNGZleg0KNmt5VUFKRlpWcHRVQUFCM3RRRC9TMHIra3pNQzA5TEE3Q0tXbTRq VW1uaDcrZGNwT1ZhVXF1MHA1N0laNk1JQg0KQU5mczd3azZrTEtYRmJNV0QrYUp5MTYrUVRC ZEw2WTVkWkh0NWl2eG8wY0cNCj1CZjY3DQotLS0tLUVORCBQR1AgU0lHTkFUVVJFLS0tLS0N Cg== --------------4C8CD52E7B6E79A5DC537F09-- From marco.bellaccini@gmail.com Sat Jun 8 07:07:54 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD9B1120019 for ; Sat, 8 Jun 2019 07:07:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6gvoX-s2NQT1 for ; Sat, 8 Jun 2019 07:07:53 -0700 (PDT) Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04D3B120086 for ; Sat, 8 Jun 2019 07:07:53 -0700 (PDT) Received: by mail-wm1-x32f.google.com with SMTP id w9so5952105wmd.1 for ; Sat, 08 Jun 2019 07:07:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=HAX6HspJDoC/WBmPDOZXDapLoW9w2Okiix9RPhgZ6fs=; b=KVQLyv9XK1gKoQ9oYv3MoOsGRwa4HSpMi0Iw5vgSnlRoOdhHU+bXobH2ePxJuPUDv/ 1TugIUvvmDu0QKD3F7+85RXiQxh/6VLEERxmuw9bfUbxz57fWpD1unnhwMzJ28A26wiP 9ZtLW08ENyYlB2xhMxOlyOiOKEGAylv8WO4A/hOFNjnk+2xX7S1FHgckdjWQA1zbprCf we7JJA3/wbt2tytR8n4Mvlj1AVFBRrDARMYcECGie2iUGK+xDpbMj6O6mPZperkF8/kC UqjhlJOGdIH7EqbxBdrBon8rEbeIFGh8frXQni8A0Toi71LwOar+PNyhNMSJrAhNVOJ5 bIbw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=HAX6HspJDoC/WBmPDOZXDapLoW9w2Okiix9RPhgZ6fs=; b=SOQg/DiDao1d1cu8FHgaRLPEL7lUjPjYRbsRiZeYp94rpePz0D/kMo3UKIhsiaukY9 PN2vJsBdNFH2LfGCnwlQSgG7pzMF3GNv6faTw/Crg81E81T3tQECQifZNQIqdMp/Y5j2 D8Up0Qa1IKAvd0nAgiQgDkJ4itzXxZGi3pBw3omr6mc1SjK7us+NgITKDf8YW3X8rTjN hIX2PgJMaeW7AaRMwx5aA/ySvle6D/HjpBkdECEEw3Cj81Et6OPLQQyFdHy3FZ5FWLW6 i6v1GpSwNyxSOx/p82nNEubbiFAmqhdeI1uof4EbqiRQOOPPe8gOhKyUcQg1hoEGal2m QrBA== X-Gm-Message-State: APjAAAVvYj6P5ECrIHwjD6ZILomzDxyqxaW2affwY7VXdOVeduwLgAZP Bn1Ph6TwfUKHkTqbVYDLuFo8oS4Fvwk= X-Google-Smtp-Source: APXvYqw8J2h+m6Z1g5PlvJ3pYVbYC0mswTLZ9rglsuNu2rBf3QUf1/z7dvU0ADxFm34MBTHxv1vNpA== X-Received: by 2002:a1c:7a15:: with SMTP id v21mr7224664wmc.82.1560002871333; Sat, 08 Jun 2019 07:07:51 -0700 (PDT) Received: from [192.168.0.34] (host36-229-dynamic.117-80-r.retail.telecomitalia.it. [80.117.229.36]) by smtp.gmail.com with ESMTPSA id e13sm10946960wra.16.2019.06.08.07.07.49 (version=TLS1_3 cipher=AEAD-AES128-GCM-SHA256 bits=128/128); Sat, 08 Jun 2019 07:07:50 -0700 (PDT) To: RFC Errata System , jon@callas.org, lutz@iks-jena.de, hal@finney.org, dshaw@jabberwocky.com, rodney@canola-jones.com, kaduk@mit.edu, ekr@rtfm.com, barryleiba@computer.org, dkg@fifthhorseman.net Cc: openpgp@ietf.org References: <20180904141225.2056DB80D34@rfc-editor.org> From: Marco Bellaccini Message-ID: <17a70f96-4007-833d-9a65-ae5df64826b8@gmail.com> Date: Sat, 8 Jun 2019 16:07:48 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 In-Reply-To: <20180904141225.2056DB80D34@rfc-editor.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: X-Mailman-Approved-At: Sat, 08 Jun 2019 08:03:53 -0700 Subject: Re: [openpgp] [Technical Errata Reported] RFC4880 (5491) X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jun 2019 14:10:56 -0000 Hi all, any update on this? Cheers Marco On 9/4/18 4:12 PM, RFC Errata System wrote: > The following errata report has been submitted for RFC4880, > "OpenPGP Message Format". > > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5491 > > -------------------------------------- > Type: Technical > Reported by: Marco Bellaccini > > Section: 6.1 > > Original Text > ------------- > #define CRC24_POLY 0x1864CFBL > > Corrected Text > -------------- > #define CRC24_POLY 0x864CFBL > > Notes > ----- > In the C reference implementation of CRC-24, the generator is wrong: the correct one is reported in Section 6. > > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party > can log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC4880 (draft-ietf-openpgp-rfc2440bis-22) > -------------------------------------- > Title : OpenPGP Message Format > Publication Date : November 2007 > Author(s) : J. Callas, L. Donnerhacke, H. Finney, D. Shaw, R. Thayer > Category : PROPOSED STANDARD > Source : An Open Specification for Pretty Good Privacy > Area : Security > Stream : IETF > Verifying Party : IESG > From nobody Sun Jun 9 03:47:29 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2582120071 for ; Sat, 8 Jun 2019 13:50:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gnupg.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T_P4SHFGK_5a for ; Sat, 8 Jun 2019 13:50:13 -0700 (PDT) Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FB9D1200D6 for ; Sat, 8 Jun 2019 13:50:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnupg.org; s=20181017; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=9//qA8MR+hB/t0XD9qCIOyKikzyVzAA7P/K+3Tr/2f8=; b=DDR5GuPH3WBt68ORl1KGmWKrM2 GIKuNkaFlV+cKJFlEk6wZxdBEioRQzFOu7luh64+Ji1t56vc7eQY4a8Jn+pi3MvhKMLYWiT5Sm1Kw oFAC9/CTOQbJgoyvBvg/h41OhmCO4M40tP7zGSY+y6SlLDCWfYKaUb0vQoCXifZYAAXI=; Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.89 #1 (Debian)) id 1hZiHy-0000e8-AV for ; Sat, 08 Jun 2019 22:50:10 +0200 Received: from wk by wheatstone.g10code.de with local (Exim 4.92 #5 (Debian)) id 1hZiDh-0005sx-3N; Sat, 08 Jun 2019 22:45:45 +0200 From: Werner Koch To: Marco Bellaccini Cc: RFC Errata System , jon@callas.org, lutz@iks-jena.de, hal@finney.org, dshaw@jabberwocky.com, rodney@canola-jones.com, kaduk@mit.edu, ekr@rtfm.com, barryleiba@computer.org, dkg@fifthhorseman.net, openpgp@ietf.org References: <20180904141225.2056DB80D34@rfc-editor.org> <17a70f96-4007-833d-9a65-ae5df64826b8@gmail.com> Organisation: GnuPG e.V. X-message-flag: Mails containing HTML will not be read! Please send only plain text. Mail-Followup-To: Marco Bellaccini , RFC Errata System , jon@callas.org, lutz@iks-jena.de, hal@finney.org, dshaw@jabberwocky.com, rodney@canola-jones.com, kaduk@mit.edu, ekr@rtfm.com, barryleiba@computer.org, dkg@fifthhorseman.net, openpgp@ietf.org Date: Sat, 08 Jun 2019 22:45:36 +0200 In-Reply-To: <17a70f96-4007-833d-9a65-ae5df64826b8@gmail.com> (Marco Bellaccini's message of "Sat, 8 Jun 2019 16:07:48 +0200") Message-ID: <875zpfu7pr.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=global_DIA_event_security_Marxist_cryptographic_CATO_fissionable_Ren"; micalg=pgp-sha256; protocol="application/pgp-signature" Archived-At: X-Mailman-Approved-At: Sun, 09 Jun 2019 03:47:29 -0700 Subject: Re: [openpgp] [Technical Errata Reported] RFC4880 (5491) X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jun 2019 20:50:15 -0000 --=global_DIA_event_security_Marxist_cryptographic_CATO_fissionable_Ren Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Sat, 8 Jun 2019 16:07, marco.bellaccini@gmail.com said: > Hi all, > any update on this? Sorry, I must have overlooked this one. Just fixed in the repo so that it will be in the next I-D. Thanks for reporting. Salam-Shalom, Werner =2D-=20 Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. --=global_DIA_event_security_Marxist_cryptographic_CATO_fissionable_Ren Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQTX/8BjtAoilLlm20f/gK6dHew1jQUCXPwecAAKCRD/gK6dHew1 jbetAQDqvg3G5YebVWqt+qfGOJwnmE6ABoxBRnQAcc9gC2+LGwD/agLMmylXkS4k CVgkQR9GEmd5f+pI3iz6aKwUrc4EMwU= =cb5n -----END PGP SIGNATURE----- --=global_DIA_event_security_Marxist_cryptographic_CATO_fissionable_Ren-- From nobody Mon Jun 10 11:11:23 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F9021200E3 for ; Mon, 10 Jun 2019 11:11:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QOan8yRkhj5q for ; Mon, 10 Jun 2019 11:11:20 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 475BE1200CD for ; Mon, 10 Jun 2019 11:11:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1560190277; bh=gGlyTrnwyVP0i+N4sfs1kBPI34HtDD9H8AaXqeYS+ow=; h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To; b=QcaVzOpbH6F2/4YTQwYV2EgCrZ6+hwRoMB5rSCD1hosypPI5Mippx3nT7UDAo/3uG M1Wig78C/1bTmZz2OrwlArYZ2vQGUUyYsDcr1CB7lxDAdTmz8duCKINN4ZrJ/NUZiD ZAX31zC3dWrDQ0R3tI5X4uCPhkLeh95Y+wOqOXX4= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.178.30] ([80.132.227.94]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LjJCt-1gxTdy0jip-00dWGr for ; Mon, 10 Jun 2019 20:11:17 +0200 To: openpgp@ietf.org References: <20180904141225.2056DB80D34@rfc-editor.org> <17a70f96-4007-833d-9a65-ae5df64826b8@gmail.com> From: Heiko Stamer Openpgp: preference=signencrypt Autocrypt: addr=HeikoStamer@gmx.net; prefer-encrypt=mutual; keydata= mQGiBDdYKNkRBACRdsFzaQn0HChOX38WHXlIYcNZAAxBQxa7gdmPXTUK+tgwQuwAr/XViQxn ExKwyOteRhwHZNSYdoKPlCOJ3c3FWCKAdflINr53NvN/qnnaF+3M1HaluiwVdfHD9a0+k7fd NFZMq2bTpzSCQBsPGipSK0K8ET8UPrXm54pXhqYL2wCgsuMBOv64bmg2zjg6vHSTKADGykcD /Agjoa7y7Cpifk4WEKDKu8nlrE9OFOJppjZ9bdJedrmZq5A/jHr35UOgbZItTmgBiz7bfMLq 7HD05ZQ3BplBmmiE0412f55GadCjN4vvnCdTqZ/ewzWdz/rzQGaJm9IvW6rupuFgrTx0GJhf we7cr6GQQo0nqA0LMCyhGHQASC56A/9NOroBzLM6wl9QlE9lybxd3cxI2UnrfHIu63tklFKF vL1XnjyJ4YR0sDs6/f56JbtEGUKTCI7ZAw+241Va4MrbDVmmsGJjQBcKxNbHDfkkjoJ9NBwr pUo2nMT3BWyKHCfnMqoyT+nN04b0Em1ffbhptKiLJSeY1mcPxvA1h7PrKbQiSGVpa28gU3Rh bWVyIDxoZWlrb3N0YW1lckBnbXgubmV0Poh4BBMRAgA4AhsDAh4BAheAFiEEdvcwETKdJ9uN fD+XT1hOuPsr4U8FAlzqvfMFCwkIBwIGFQoJCAsCBBYCAwEACgkQT1hOuPsr4U8jZQCfbz7N emwAJ2OdrBP9mmsySktb4IQAnRWJOYy4bH3R42nh6KCUkbDXQoNhuQMNBDdYKtkQDACuGU2S WXmjpoyGIX/UHze60OolxBdtKzhvDZHhy1Sz8NNrdkI3ozuYOMxkKZZLTw/iQigVNQfwy+5f AUw6KaH8OPnwInqyeguI6PwG0qQK2cWlSTZDlTW8B2D3Qpjt8sYnnjGEIGKGb7ZAUgODmWYd sS35otyEQT0Un/kRIqjyQcvWgNH++t+LypXUxu0eD0dlD/kx46TP9kqTYsr/8vWWhD2J98x0 ZFrFMN8QDCIhO9x3p+qPyfSiAdnuI4iN1RYsKtC2ikb+cIc5bYysnRots1anAy3Pd5Q8bFtj lzxPPRh90v/Yq5RM/3IgbsbS0zDI0ldznld+DInezLs/EROsITmmbXrhIAHC8TjcXtxWR3ht nFLnIgmQ3Rag0bQesNF4Y5bXSGcw/MxwWcm6EXwcbm7Uc64k8YxXMYyNy+XX/bi1o7r5JdH0 mKUFeXTF9WLrNpF4jBylHk1RNDbR6kp6M87vPJeg/nQh19ItQQxYJGYu9KBhBGhFtDUIAyLT nTcAAwUL/2tHe52rFeCVvZo7RZ5SQy/aclx7hnPsvb3yTXcvg5c7hweOL7Zfsh/XnE3acRO0 YAfGb0LxMFJlfpHgcPuTZEd5rPgJz68GccACBPw8Z8MgQEBE5H/UiAR/HM9AQmEN+wfjeDlv 6ZGElmnY59gYIuCGUVsqw5pwCCsLBs3xlMTyCiNwDHERRao3YTGhaNy9hsCdqNHQcXdSzdF6 OtvfMnXI67QGyiNcbjVwXwQHlGAsxo4O3FMOl138o1Oa00JMSk7td8bClMAp7Hu4zrw533TZ 2Avp+6OFjUAQ4U4hdEDGePNm2hbQinKnUCd30PboqIdZDmYq4SSeNMbWKwy3Etx/a0GX39F/ gnjmveBHSWGGB+wSKcrK3yfXNXMa4OW683m/aH1msS0L0SFwbm2w7XdALp0DCV031x1JoGAn c0mVcstbVM7KNUGnCOA9D4USKHrj/IoZVoapx0b+bWPFHtfLhcm2lSDlq7F140DlQVL1xZmA nPcpLyXMmEmnS2JCZYhGBBgRAgAGBQI3WCrZAAoJEE9YTrj7K+FPcRMAnige4x75lK1p7sbK sdhZb6tv4CJPAKCpDqRn9o7nfvLlouXNaIR1nri7cw== Message-ID: Date: Mon, 10 Jun 2019 20:11:04 +0200 MIME-Version: 1.0 In-Reply-To: <17a70f96-4007-833d-9a65-ae5df64826b8@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:EDYnxfHosURJdvrnvt/PPSzVGLWV7TTLbajrnPQxxoXJwqiC55E UPbWykGdBIe+XMvheozTRAwYy5YpqrFyO+jHH+Pw43dKuz8VI4kxipb0rcqTctw3cexZdkQ 3KzY/COhRujv8EjnXwpwpPjIy7qPmnkYa8cM2DqJ2GNUBPQ6sXLHR8b8V1dkgQ0Sd9TAVUe LqjuF+2md+p08YMxx4H+Q== X-UI-Out-Filterresults: notjunk:1;V03:K0:EqgvLaMbYyM=:UKKVBk2nO1CiBvfY3gHxTe VYkZfpE2eiQQLZz2cuhpPoeu9ExQIP7wOeCni7q2zEWui1BpzX3/2RqW1+Sec05Nc7KJltvmf h2VZR6NUncws4oht7/K5SKQUSc00Pj551CpXV3JSKpWB2kevq1pNRmzqOWoExvZPuyNVEalst GHf4t39MKuv4JK2xj7HgG8v/vImOmblyaq76KHB7ds+14bSw1Pj+hWx0XIAEQVDBl9rXTerJB 0XHahX8FNo2Q9lXbeV4pDPT6yFmCrYtvTGhMkklHs5aAOrSXb2vgvMPXO3AdNy/HzMDq2FSfu uFCPF+4CRAnrW4KwO1jVtI3hJkb5xBsePfKa7UrR3xcoCf63CWPMvLo6cFBYd6lwWKiZkrppx 7tvkFU3lmvNvHtTHsX6W3oZXkzEuP0qRoykGL3fCnq37a1R1Y/79HtECQ8N8iyDT6M1XOxDGd AZTYs1Vd3zJPTPeUshlrn0cfiwJaNNxvmWQuMAr7xBDqx65LYoYvNGmtii6Zv1r1lP/Q5KM55 +pMMyy5C4e9pCQBH3Y6bsXSrbAGGQ+efcqLKWKi3PFkXs0l0VbcR43UvObFE7vFP/KE+iAoXB Q/qmbTqW8JSNH12eowefgp8WdNcjbtbpcilPbIJLHibg2UH2r9FDiRUwu1urt5U8wLa+SIlAx wDZCPfk93E3HYGlndqiidAQHGKC5vt9jfPGkEm1LFrGmPp6xAEc/5kgngu29BuV7+PV3DHWCU OPClVy9PdjNZDP+/yophYl26WtvcIpxyR3U+mXbsk6bqZ8YA7PmMXwigdrH7hZY7Bn/D28X6b Mss4Sq8ihv4OLQ+82ksfqe/iBBQkgKhDVB26AWxgVm5T5uIJVNaF10tJz/cBnYR0FpickG+tC VBvOad5jQtJPSNloOk3nYFAN5YcGlf6/D5F/WJ9UpFVz6ziFSmKc9aUf2QJIIkndv6DocZX7a gxNZmZfZ84HLDDA6GjsJeDV4VkdDDa+gkSLuz+/psdKwppES0zPX8 Archived-At: Subject: Re: [openpgp] [Technical Errata Reported] RFC4880 (5491) X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2019 18:11:22 -0000 On 08 June 2019 at 16:07, Marco Bellaccini wrote: >> Original Text >> ------------- >> #define CRC24_POLY 0x1864CFBL >> >> Corrected Text >> -------------- >> #define CRC24_POLY 0x864CFBL >> >> Notes >> ----- >> In the C reference implementation of CRC-24, the generator is wrong: Just for the records: The wording "generator is wrong" seems to be a bit misleading, because the highest degree term of CRC-24-Radix64 polynomial is x^{24} [1] and the reference implementation takes care of the special form of the constant. However, as there exists an established representation for those polynomials [2], the proposed change is at least of some editorial relevance. [1] https://en.wikipedia.org/wiki/Cyclic_redundancy_check [2] https://en.wikipedia.org/wiki/Mathematics_of_cyclic_redundancy_checks#Poly= nomial_representations =2D- Heiko From nobody Wed Jun 12 09:54:33 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00E781200B6 for ; Wed, 12 Jun 2019 09:54:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=my.amazin.horse Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VHNQDpmfCw01 for ; Wed, 12 Jun 2019 09:54:28 -0700 (PDT) Received: from mail.mugenguild.com (mugenguild.com [5.135.189.5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECB0512010E for ; Wed, 12 Jun 2019 09:54:27 -0700 (PDT) Received: from localhost (p5B0744A4.dip0.t-ipconnect.de [91.7.68.164]) by mail.mugenguild.com (Postfix) with ESMTPSA id AA3C05FC2E for ; Wed, 12 Jun 2019 18:54:25 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=my.amazin.horse; s=mail; t=1560358465; bh=3QgNdPFcZIO7ylNMoNsky1ScvFgK6rm6DQJdYTXdXQw=; h=Date:From:To:Subject:Autocrypt:From; b=X9yo2O4Dxzwi+lvGQMpeuaNeNOvZQ5GQbrxjdT6fkmG6RrOwycnlio1FpfvwQjwoW ZVw4K2mj9OC4LJBZDU0q1FwsqD+JvIMkJDami2AJKgtWJARejRL1wyKApqn3Rbi3bL 3ATNm1NJA7mqinpYLCBCxYli/9Vc7xP8IumYX9OU= Message-Id: <3NVU5541SFC9Z.31QCVT004UI9Z@my.amazin.horse> Date: Wed, 12 Jun 2019 18:54:25 +0200 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Vincent Breitmoser To: openpgp@ietf.org Cc: Autocrypt: addr=look@my.amazin.horse; keydata=mQINBFAB3UABEADCyB/vbIBA3m1Bwc yjTieEMLySwYgt54EQ2hglOocdtIhqC+b05t6sLSkwx2ukxrU2cegnCBkdyF/FZ/+Et638CUEBbf 4bjplwpt2IPLazQgjkwjMuhz0OcYDpMhwimTvh3mIl+0wzpOts6mEmMw0QZdl3RXvIW+NSynOn7q mz/fAv4Htt6lv2Ka0s6R2voyi+5U7CcIqizPad5qZVn2uxmovcFreTzFt6nk37ZbbTfvA3e5F0bR RQeH3viT5XxpJF4Y76v/Ua+5N3Kd18K0sX85rD1G7cmxR2CZ5gW1X24sDqdYZdDbf10N39UIwjJH PTeuVMQqry792Ap0Etyj135YFCE0loDnZYKvy2Y1i0RuEdTUIonIHrLhe2J0bXQGbQImHIyMgB9/ lva8D+yvy2gyf2vjRhmJEEco7w9FdzP7p3PhKrUiTjRsjHw8iV8LOCFx9njZOq9mism9ZZ16tZpx 9mXOf11HcH1RtVuyyQRS/4ytQPzwshXdSDDW6Btkmo9AbZQKC54/hSyzpp3Br2T2xDH7ecnonDB/ jv8rWuKXSTbX3xWAIrNBNDcTYaNe4jkms4HF7jJE19eRlqsXMMx6Fxvrh4TtKICwJYJ3AUmXrK3X Ti/mjqYfJ1fpBn54rWs8nhSR1fuZPD+aMlcP8BDUPlNKPKtj0DGSh3/VlnnwARAQABtClWaW5jZW 50IEJyZWl0bW9zZXIgPGxvb2tAbXkuYW1hemluLmhvcnNlPokCOAQTAQIAIgUCVTNZmgIbAwYLCQ gHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQe9GDIN6t+hHcVg//aeiijNqsQ3pjbFQn3VvND7hNfJ vrVcLZ+U4kOzXPF818aVdOnDyNXyE17vBDDcvaZ730sCsZIRZJ3KhUJ+nPvdttKjUIGLARmx+pA3 Jl3IIv2uLtOb3I0TMuyfIGJVGF+q10/CeDMKVjKlmyOVrR0opkel+KEoN7VLq3Hf3zPKENO1HBgp LHeP31tlb9cgs+u4o2wLrVe9myHbuFBW7EjWbSvdz2zliwbsFeFVLMNcWrKAU0GkkiH69SgnwmXU RkhGma4L27GLtkHHufsxfbcPqPtmtCttsGZU4EmrghGUqVyDOxnn8ZqybzLrRfpin+OCIX+aHJz5 r2L8qtrP0LorNMX3Gopd26vfhNvq/wq8xk++bW1R5FmkaUhx9h+DhO2ybcg7p/E8JHc8zrWv+bb3 0o9lkrOaU8GxXrgtb1cjtbb+MxFvjm0Elw7MSZDG7sF/APFU6cwuIA9Nai/OGAUCSt/W2ecS8Zox cWWbGSEiDvjtEctkpmHjfVuGoL34966Olm41VdH+NjgoSYUJKx4Mty8DRcZxdyoXll84LvDkEEYK ZqOIACsJf8CDFvUkmhXc+moCj15Yxtj3/RslRVEiOUyrpDwB72zWcZG8YnzoyGxhcRIc/gFejO/y SI8bzCpYngeuTb5NjFG+ChGiInHbQcFeHBlaHtKi2o/B5axIO5Ag0EVDvOgQEQALJby/ztliToGE u1lslvWQUQ6teKZVUQ7hy9bM4N83G0AGLatUBHtY6PkJBe4XkIw3sK7LoFCV2W4GSt4zWp9l+kG3 /J8Ow7EFjN0F7DrCg0M0lMg9dQz9jYSoBR8skaH3BRzCq9AKIVKV94poL/G65289L7zKDHoZnnyF qbBtedYZir0SZx+kiouZ1qnmxRPaYmH2fkuiuvYEAyzLDLYM8F5gQhdZM4YVtuvSICYPet0z4CDi JX/vZmDi3AzzoEVaKeAM/0H9f9Ni547J2+8dZSllgTrA+fq0aMJVScAObIxTAQtEq0DoNBzPpVrm W10b4bmgePrAvNkifqSr5StymSBgwvoeW6GrJiyN4XhoLOadZzwgjqioR1nXw5tXtrr5sYdkZ06b 1WWHkxtu1hFTdLC7RYNxY07ytLNM+C2lplCwCwlWB7RwI9BL1Dhre4kv8uaaX2Gksaq9mDf9MSDW qQ0TJ/RAiwMGmFrzBEYI1J2Oyeshi/dqW4/OiZAukOIlxOnt6u8zU2KL6Qjxqqna0oTbS4Zv3fRd YkuUCL6CDEJdkuRAiW+Gw+lKcMjXqApEqixhaDkoB/kwtu+2gIFTzAxMfwFN1YtNc0kJZWnFkGIW MrrwTcOwAFzlFz7wn/EyMFtg+ERcqMX0+olXDwM8MODI2+BzulPuEDEteCw09hABEBAAGJAh8EGA ECAAkFAlQ7zoECGwwACgkQe9GDIN6t+hFjuQ//UQyg49f8TytUYQaBb8R0UfI+KhQFs1Nsz2z8a3 0CD1MeiHHYWdAcomVvTkg4g5LbnYHVDrj/XagY3FN/AIE97usFbsTG+rsWAOLi7N2dN2ehWZ634k MvrgyC9uTiOdkw31+B8K5MpyySgD8e6SAzRfiu06/bcQOUyJifw8Hudpj9by4uyGhSH+kHu4afrp OduUighbsGFtcuRwwQ/w/oSk68XvPUgiOQWMZh/pVoXdFyFvrt/hgArCi8dfy5UPK58nl7jPnu/I uQXrJ50nNAFIIxPVeo2/B83KAnEZPU+qWZsdba0V+FIIQQVizLtQFMuJJk4/UTAOfJ2tBpQ9PADX 6/scqDE7unXNWdxcHTjK7KmWjXC8CyhGOx8V/rb7Ial4mZo4cTED6SNlO7dV1XYwnSctL2HCYNM3 RUe4eJ7JWuu7/Nbf6yip2eq7BQKZ9hAH/se/OSZNYsEkZ4pxUc8W5U3uAZImUwC6L74SM0jBZIuD mQhOYX6sZZ6urIn/MYlj4/hqSBFS4vTK7nXRLmtr7+5T5U5srVseUiYc+l9pu9/XD8zGIu+M2xEd 41NwP44GDQTQm0bFljRv5fSblwmi56YHPFQUIh2RZNX3kOJgeyQ3enw5uY+7ocKRVP38hpnffliL lJcO6TtHWnElS3pACbTQM0RHJox3zqU3q6K3c= Archived-At: Subject: [openpgp] Launching a new keyserver on keys.openpgp.org! X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jun 2019 16:54:31 -0000 Hey OpenPGP folks, the Hagrid team is pleased to announce the launch of our new keyserver, running at keys.openpgp.org! https://keys.openpgp.org Here's the short story: * Fast and reliable. No wait times, no downtimes, no inconsistencies. * Precise. Searches return only a single key, which allows for easy key discovery. * Validating. Identities are only published with consent, while non-identity information is freely distributed. * Deletable. Users can delete personal information with a simple e-mail confirmation. * Built on Rust, powered by Sequoia PGP - free and open source, running AGPLv3. Full news announcement: https://keys.openpgp.org/about/news#2019-06-12-launch Our primary motivation was to have a place where OpenPGP clients can reliably and quickly obtain updates to key material (subkeys, revocations, ...), and that also has as a simple and useful way of key discovery. Some of the things we do are a bit experimental. For some things we found that there is no good mechanism at this point, so we decided to drop them for now. Most notably this includes third party signatures on keys, because they in their current form the difficulties wrt privacy and spam outweigh their usefulness. The server implementation Hagrid (as in, "keeper of keys") is developed here: https://gitlab.com/sequoia-pgp/hagrid Feel free to file issues if you find anything out of place. Please read our FAQ first ;) Huge thanks to Kai for the initial implementation, Justus and Neal for creating Sequoia and working with me on this, dkg and Paul for testing and tons of feedback, Phil for providing us with the domain, and of course everyone who helped us test and polish this thing! Happy to hear your feedback! - V From nobody Thu Jun 13 14:59:42 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96E9E1200EC for ; Thu, 13 Jun 2019 14:59:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xF6o-C07s70X for ; Thu, 13 Jun 2019 14:59:38 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3482112006D for ; Thu, 13 Jun 2019 14:59:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1560463175; bh=5gnebi5FESzff9c3z0Zy6Cms81asFcmnP+CxfLrZc8g=; h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To; b=MRJZhA4h1dj4ntz7zF7U7Qh3jnnWjU3N6e2nt2s74kNFHTyrn8tveo37tjESzxi52 RGUviMfTuXtBN1EhQhFSK+jKXyIT0qlg2QmnNw/N4H+NWPKQsZlrFM9ehRXmvPSyTN WOIlf2FlRU72VCAukYs8YUaApZLvsFlwjxqjIV0M= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.178.30] ([80.132.227.94]) by mail.gmx.com (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1Mjj8D-1iLMuC25JD-00lDkx for ; Thu, 13 Jun 2019 23:59:35 +0200 To: openpgp@ietf.org References: <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> From: Heiko Stamer Openpgp: preference=signencrypt Autocrypt: addr=HeikoStamer@gmx.net; prefer-encrypt=mutual; keydata= mQGiBDdYKNkRBACRdsFzaQn0HChOX38WHXlIYcNZAAxBQxa7gdmPXTUK+tgwQuwAr/XViQxn ExKwyOteRhwHZNSYdoKPlCOJ3c3FWCKAdflINr53NvN/qnnaF+3M1HaluiwVdfHD9a0+k7fd NFZMq2bTpzSCQBsPGipSK0K8ET8UPrXm54pXhqYL2wCgsuMBOv64bmg2zjg6vHSTKADGykcD /Agjoa7y7Cpifk4WEKDKu8nlrE9OFOJppjZ9bdJedrmZq5A/jHr35UOgbZItTmgBiz7bfMLq 7HD05ZQ3BplBmmiE0412f55GadCjN4vvnCdTqZ/ewzWdz/rzQGaJm9IvW6rupuFgrTx0GJhf we7cr6GQQo0nqA0LMCyhGHQASC56A/9NOroBzLM6wl9QlE9lybxd3cxI2UnrfHIu63tklFKF vL1XnjyJ4YR0sDs6/f56JbtEGUKTCI7ZAw+241Va4MrbDVmmsGJjQBcKxNbHDfkkjoJ9NBwr pUo2nMT3BWyKHCfnMqoyT+nN04b0Em1ffbhptKiLJSeY1mcPxvA1h7PrKbQiSGVpa28gU3Rh bWVyIDxoZWlrb3N0YW1lckBnbXgubmV0Poh4BBMRAgA4AhsDAh4BAheAFiEEdvcwETKdJ9uN fD+XT1hOuPsr4U8FAlzqvfMFCwkIBwIGFQoJCAsCBBYCAwEACgkQT1hOuPsr4U8jZQCfbz7N emwAJ2OdrBP9mmsySktb4IQAnRWJOYy4bH3R42nh6KCUkbDXQoNhuQMNBDdYKtkQDACuGU2S WXmjpoyGIX/UHze60OolxBdtKzhvDZHhy1Sz8NNrdkI3ozuYOMxkKZZLTw/iQigVNQfwy+5f AUw6KaH8OPnwInqyeguI6PwG0qQK2cWlSTZDlTW8B2D3Qpjt8sYnnjGEIGKGb7ZAUgODmWYd sS35otyEQT0Un/kRIqjyQcvWgNH++t+LypXUxu0eD0dlD/kx46TP9kqTYsr/8vWWhD2J98x0 ZFrFMN8QDCIhO9x3p+qPyfSiAdnuI4iN1RYsKtC2ikb+cIc5bYysnRots1anAy3Pd5Q8bFtj lzxPPRh90v/Yq5RM/3IgbsbS0zDI0ldznld+DInezLs/EROsITmmbXrhIAHC8TjcXtxWR3ht nFLnIgmQ3Rag0bQesNF4Y5bXSGcw/MxwWcm6EXwcbm7Uc64k8YxXMYyNy+XX/bi1o7r5JdH0 mKUFeXTF9WLrNpF4jBylHk1RNDbR6kp6M87vPJeg/nQh19ItQQxYJGYu9KBhBGhFtDUIAyLT nTcAAwUL/2tHe52rFeCVvZo7RZ5SQy/aclx7hnPsvb3yTXcvg5c7hweOL7Zfsh/XnE3acRO0 YAfGb0LxMFJlfpHgcPuTZEd5rPgJz68GccACBPw8Z8MgQEBE5H/UiAR/HM9AQmEN+wfjeDlv 6ZGElmnY59gYIuCGUVsqw5pwCCsLBs3xlMTyCiNwDHERRao3YTGhaNy9hsCdqNHQcXdSzdF6 OtvfMnXI67QGyiNcbjVwXwQHlGAsxo4O3FMOl138o1Oa00JMSk7td8bClMAp7Hu4zrw533TZ 2Avp+6OFjUAQ4U4hdEDGePNm2hbQinKnUCd30PboqIdZDmYq4SSeNMbWKwy3Etx/a0GX39F/ gnjmveBHSWGGB+wSKcrK3yfXNXMa4OW683m/aH1msS0L0SFwbm2w7XdALp0DCV031x1JoGAn c0mVcstbVM7KNUGnCOA9D4USKHrj/IoZVoapx0b+bWPFHtfLhcm2lSDlq7F140DlQVL1xZmA nPcpLyXMmEmnS2JCZYhGBBgRAgAGBQI3WCrZAAoJEE9YTrj7K+FPcRMAnige4x75lK1p7sbK sdhZb6tv4CJPAKCpDqRn9o7nfvLlouXNaIR1nri7cw== Message-ID: <82eb1f82-f2a2-a881-2c18-fd9427c882ed@gmx.net> Date: Thu, 13 Jun 2019 23:59:22 +0200 MIME-Version: 1.0 In-Reply-To: <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:AvYRN/m+nYm5f1vaPPg//jVSXWBW7RMTFz20KGgd9LhDQCbz0m0 aQbcdKKuTSlixYY/zwCgRohI9DbVAmSL6dmZD+bcHJGXI1oev0rYfJ8UIJrKuMiIsTaRn3D 7t8tZo6ShtqoqMI9SxZFdEpfnfAhHgy5YF2XRfimm6mbnilZSWxJefG69ggdBEm9M844RgL F0eq2NidTDjNHi76pI0yQ== X-UI-Out-Filterresults: notjunk:1;V03:K0:K6j8/3Zrglk=:huziMqsO1JJ8IIwne4OBd1 oega0HHopkty111nHA9Csg3/o/pyTBZdrgPyjy2XdZC0PprAROqGeMpWupWDxsl3r4lcHvRIp L8xdWvisxCWmXbbs/8Cm0IykiCuDaBxJSMIC3j21mdDjyM64LdfMVUDntycvVw37M3t67Psmp J9doNJWMDiC/1EVsa91zbJRsMbKzr3NQDol9SXeiSpc52ps+tft/r9lRIe+iXhLYKX3Px2sRF I+6MQXmZuqLxT91JEgU7BJ157BQ3s8UeE11/3TSkMUoP18auFeTex08RYSYQ93oVyqMe0lh30 h8JwOwq2GREQUloQzQqMkvmN3kQ2H/oceywzqRqPGGxcNnqRqCNhaW58NB3hTWvC32s8uKGW6 +Ifp50y9i0SlMJXvsq7l0sdE1VIB6s7EfugJtw9VjW/yG4NQPELgAaiD8MsSSzW1BXUCng7Cm S69mUoTX0N1+v4PJM2DP7qaOHhmrX/zxBTz6pOA7zq45wm9DQ2MaQm/0uCIqC0538qrFX9qMI ZaT5t9Vbr2rvSiymLc4ajk5izxeQ77YmihG+rWcu1R2UCM3IJBapy4moGxErSka9a28l8YgSO jJmfdFpnK53f7Wwlj/q7XNuqhXbFIr9qBTyJuqsj6UJ9HTF2wh6x2N+qCpwQlSIXAUuY0Kn36 /Wfl4A9Br9CodYTybbbcxTbniyKhJdMO5dJETSotkB3fKfnwjaI+0U0f1Wx788S3WNHroPas5 vxoY39h1SuT4h7pSgAqSwX57UfCc1WFJ6Ojj2snW0cbbty9RRacNKJqhEl/zi4+0bTVK0EPB5 xkITXLYfr7dj9APvEWxv6U+sAgV4YYOXsiC0Xi0Qtia2hOqdhUIpG7Bu3vmgdz85d4y/1f//y hDYRLAMms/r2HYwkOIDiNVwZXynd/kTuIJmIT2lFukOhzq8oiJRNbUmFeariFoPYdhh6y/HCb rzQEOE+rEBi/V29+76/WSUesJt7W+L+QraW2PnVbmGb3u7mOn3CMP Archived-At: Subject: Re: [openpgp] Privacy-preserving Transferable Public Keys X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2019 21:59:41 -0000 On 31 May 2019 at 09:42, Vincent Breitmoser wrote: > Strictly speaking there doesn't have to be a signature on that User ID, = but in > practice OpenPGP implementations commonly consider TPKs that carry no Us= erID (or > no signed UserID) as invalid. I'll change that in DKGPG soon, however, to avoid trouble IMHO some kind of self-signature is still required (e.g. type 0x1f). > I would really like to see these consideration addressed in the spec som= ehow. Thus I suggest to change (in section 11.1 of draft RFC 4880bis) Zero or more revocation signatures to Zero or more revocation or direct key signatures to cover such use cases without user IDs or user attributes. Perhaps already RFC 4880 had those scenarios in mind (cf. section 12.1): Primary-Key [Revocation Self Signature] [Direct Key Signature...] [User ID [Signature ...] ...] [User Attribute [Signature ...] ...] [[Subkey [Binding-Signature-Revocation] Primary-Key-Binding-Signature] ...] =2D- Heiko From nobody Thu Jun 13 22:55:15 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CFF91200B5 for ; Thu, 13 Jun 2019 22:55:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gnupg.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rM1daopTfn4M for ; Thu, 13 Jun 2019 22:55:11 -0700 (PDT) Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0513E120018 for ; Thu, 13 Jun 2019 22:55:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnupg.org; s=20181017; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=wvVfzeBCmQep5bEFOQfO4F0OUyS2WGAiTLEAceDSOZ4=; b=kUVRxcXGQHcY6mxKA9wTFb7nDt adK/wrv2q5Y2FkJBGLOutRNroZ08kUfbkrF58f5wWSVnK7wQgqSVlNI99C6/3crU70S9mibf9JHXx V+M9Jkcl2GYEXS5dw9PM0ZvCRhLgEkDpykpnpOCb8Lqe0tLA2Bfgi99iLrio6m0Y0yQQ=; Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.89 #1 (Debian)) id 1hbfB7-0003gL-82 for ; Fri, 14 Jun 2019 07:55:09 +0200 Received: from wk by wheatstone.g10code.de with local (Exim 4.92 #5 (Debian)) id 1hbf7I-0003Sb-O7; Fri, 14 Jun 2019 07:51:12 +0200 From: Werner Koch To: Heiko Stamer Cc: openpgp@ietf.org References: <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> <82eb1f82-f2a2-a881-2c18-fd9427c882ed@gmx.net> Organisation: GnuPG e.V. X-message-flag: Mails containing HTML will not be read! Please send only plain text. Mail-Followup-To: Heiko Stamer , openpgp@ietf.org Date: Fri, 14 Jun 2019 07:51:02 +0200 In-Reply-To: <82eb1f82-f2a2-a881-2c18-fd9427c882ed@gmx.net> (Heiko Stamer's message of "Thu, 13 Jun 2019 23:59:22 +0200") Message-ID: <87a7ekr9yx.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=BCCI_morse_National_laboratory_wire_transfer_Fundamentalism_PSAC=Lig"; micalg=pgp-sha256; protocol="application/pgp-signature" Archived-At: Subject: Re: [openpgp] Privacy-preserving Transferable Public Keys X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2019 05:55:13 -0000 --=BCCI_morse_National_laboratory_wire_transfer_Fundamentalism_PSAC=Lig Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Thu, 13 Jun 2019 23:59, HeikoStamer@gmx.net said: > I'll change that in DKGPG soon, however, to avoid trouble IMHO some kind > of self-signature is still required (e.g. type 0x1f). Right. Most properties of an OpenPGP key are conveyed via self-signatures. Thus for general use they are really important. Derek has a very special use case and that is why the need for a self-signature has been dropped. Almost all other applications still need them. Direct key signatures can of course be used but we do not have much experience with them. I fear that some OpenPGP implementations will not work correctly if only such a direct key self-signature is available. Salam-Shalom, Werner =2D-=20 Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. --=BCCI_morse_National_laboratory_wire_transfer_Fundamentalism_PSAC=Lig Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQTX/8BjtAoilLlm20f/gK6dHew1jQUCXQM1xgAKCRD/gK6dHew1 jWZ6AP49VCGz8XCFkxbwIfbRg3B7Vjgn0vI78skQveCJB4+hKQEA3fNpdC7OrSMY /aRBWg3bDrxNoxu8y3cIG7g3f3Y5sgo= =EZj5 -----END PGP SIGNATURE----- --=BCCI_morse_National_laboratory_wire_transfer_Fundamentalism_PSAC=Lig-- From nobody Fri Jun 14 00:22:31 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB54A120194 for ; Fri, 14 Jun 2019 00:22:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=my.amazin.horse Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cuD7u08WpiDg for ; Fri, 14 Jun 2019 00:22:27 -0700 (PDT) Received: from mail.mugenguild.com (mugenguild.com [5.135.189.5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE53B120019 for ; Fri, 14 Jun 2019 00:22:27 -0700 (PDT) Received: from localhost (ip5f5abc23.dynamic.kabel-deutschland.de [95.90.188.35]) by mail.mugenguild.com (Postfix) with ESMTPSA id A220A5FB11; Fri, 14 Jun 2019 09:22:24 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=my.amazin.horse; s=mail; t=1560496944; bh=RHOShB6Zaf8OthE6zKGyWb6Ei8v36mW+N4MkTrg6G6o=; h=Date:From:To:Subject:Autocrypt:From; b=RPkn2huHG026GqZQZo7ngh/pG5LqoDSqOGlfiW7oK3qzztKBLigqpFP4JSXh1hz1/ Yxt79fxlFRR1KEG1GkK5JXfmzxaFy6BlcCgMn0WwLVCiJ/NfyQ5DqDEadkl9JwzyXV 4L1ycFe9MqSBDp+1wTGh+IMTid9+rsHcNT1muveY= Message-Id: <2QQO2RI7GY6IJ.30E5D9L1YG69W@my.amazin.horse> In-Reply-To: <87a7ekr9yx.fsf@wheatstone.g10code.de> References: <87a7ekr9yx.fsf@wheatstone.g10code.de> <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> <82eb1f82-f2a2-a881-2c18-fd9427c882ed@gmx.net> Date: Fri, 14 Jun 2019 09:22:21 +0200 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Vincent Breitmoser To: Werner Koch Cc: Heiko Stamer , openpgp@ietf.org Autocrypt: addr=look@my.amazin.horse; keydata=mQINBFAB3UABEADCyB/vbIBA3m1Bwc yjTieEMLySwYgt54EQ2hglOocdtIhqC+b05t6sLSkwx2ukxrU2cegnCBkdyF/FZ/+Et638CUEBbf 4bjplwpt2IPLazQgjkwjMuhz0OcYDpMhwimTvh3mIl+0wzpOts6mEmMw0QZdl3RXvIW+NSynOn7q mz/fAv4Htt6lv2Ka0s6R2voyi+5U7CcIqizPad5qZVn2uxmovcFreTzFt6nk37ZbbTfvA3e5F0bR RQeH3viT5XxpJF4Y76v/Ua+5N3Kd18K0sX85rD1G7cmxR2CZ5gW1X24sDqdYZdDbf10N39UIwjJH PTeuVMQqry792Ap0Etyj135YFCE0loDnZYKvy2Y1i0RuEdTUIonIHrLhe2J0bXQGbQImHIyMgB9/ lva8D+yvy2gyf2vjRhmJEEco7w9FdzP7p3PhKrUiTjRsjHw8iV8LOCFx9njZOq9mism9ZZ16tZpx 9mXOf11HcH1RtVuyyQRS/4ytQPzwshXdSDDW6Btkmo9AbZQKC54/hSyzpp3Br2T2xDH7ecnonDB/ jv8rWuKXSTbX3xWAIrNBNDcTYaNe4jkms4HF7jJE19eRlqsXMMx6Fxvrh4TtKICwJYJ3AUmXrK3X Ti/mjqYfJ1fpBn54rWs8nhSR1fuZPD+aMlcP8BDUPlNKPKtj0DGSh3/VlnnwARAQABtClWaW5jZW 50IEJyZWl0bW9zZXIgPGxvb2tAbXkuYW1hemluLmhvcnNlPokCOAQTAQIAIgUCVTNZmgIbAwYLCQ gHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQe9GDIN6t+hHcVg//aeiijNqsQ3pjbFQn3VvND7hNfJ vrVcLZ+U4kOzXPF818aVdOnDyNXyE17vBDDcvaZ730sCsZIRZJ3KhUJ+nPvdttKjUIGLARmx+pA3 Jl3IIv2uLtOb3I0TMuyfIGJVGF+q10/CeDMKVjKlmyOVrR0opkel+KEoN7VLq3Hf3zPKENO1HBgp LHeP31tlb9cgs+u4o2wLrVe9myHbuFBW7EjWbSvdz2zliwbsFeFVLMNcWrKAU0GkkiH69SgnwmXU RkhGma4L27GLtkHHufsxfbcPqPtmtCttsGZU4EmrghGUqVyDOxnn8ZqybzLrRfpin+OCIX+aHJz5 r2L8qtrP0LorNMX3Gopd26vfhNvq/wq8xk++bW1R5FmkaUhx9h+DhO2ybcg7p/E8JHc8zrWv+bb3 0o9lkrOaU8GxXrgtb1cjtbb+MxFvjm0Elw7MSZDG7sF/APFU6cwuIA9Nai/OGAUCSt/W2ecS8Zox cWWbGSEiDvjtEctkpmHjfVuGoL34966Olm41VdH+NjgoSYUJKx4Mty8DRcZxdyoXll84LvDkEEYK ZqOIACsJf8CDFvUkmhXc+moCj15Yxtj3/RslRVEiOUyrpDwB72zWcZG8YnzoyGxhcRIc/gFejO/y SI8bzCpYngeuTb5NjFG+ChGiInHbQcFeHBlaHtKi2o/B5axIO5Ag0EVDvOgQEQALJby/ztliToGE u1lslvWQUQ6teKZVUQ7hy9bM4N83G0AGLatUBHtY6PkJBe4XkIw3sK7LoFCV2W4GSt4zWp9l+kG3 /J8Ow7EFjN0F7DrCg0M0lMg9dQz9jYSoBR8skaH3BRzCq9AKIVKV94poL/G65289L7zKDHoZnnyF qbBtedYZir0SZx+kiouZ1qnmxRPaYmH2fkuiuvYEAyzLDLYM8F5gQhdZM4YVtuvSICYPet0z4CDi JX/vZmDi3AzzoEVaKeAM/0H9f9Ni547J2+8dZSllgTrA+fq0aMJVScAObIxTAQtEq0DoNBzPpVrm W10b4bmgePrAvNkifqSr5StymSBgwvoeW6GrJiyN4XhoLOadZzwgjqioR1nXw5tXtrr5sYdkZ06b 1WWHkxtu1hFTdLC7RYNxY07ytLNM+C2lplCwCwlWB7RwI9BL1Dhre4kv8uaaX2Gksaq9mDf9MSDW qQ0TJ/RAiwMGmFrzBEYI1J2Oyeshi/dqW4/OiZAukOIlxOnt6u8zU2KL6Qjxqqna0oTbS4Zv3fRd YkuUCL6CDEJdkuRAiW+Gw+lKcMjXqApEqixhaDkoB/kwtu+2gIFTzAxMfwFN1YtNc0kJZWnFkGIW MrrwTcOwAFzlFz7wn/EyMFtg+ERcqMX0+olXDwM8MODI2+BzulPuEDEteCw09hABEBAAGJAh8EGA ECAAkFAlQ7zoECGwwACgkQe9GDIN6t+hFjuQ//UQyg49f8TytUYQaBb8R0UfI+KhQFs1Nsz2z8a3 0CD1MeiHHYWdAcomVvTkg4g5LbnYHVDrj/XagY3FN/AIE97usFbsTG+rsWAOLi7N2dN2ehWZ634k MvrgyC9uTiOdkw31+B8K5MpyySgD8e6SAzRfiu06/bcQOUyJifw8Hudpj9by4uyGhSH+kHu4afrp OduUighbsGFtcuRwwQ/w/oSk68XvPUgiOQWMZh/pVoXdFyFvrt/hgArCi8dfy5UPK58nl7jPnu/I uQXrJ50nNAFIIxPVeo2/B83KAnEZPU+qWZsdba0V+FIIQQVizLtQFMuJJk4/UTAOfJ2tBpQ9PADX 6/scqDE7unXNWdxcHTjK7KmWjXC8CyhGOx8V/rb7Ial4mZo4cTED6SNlO7dV1XYwnSctL2HCYNM3 RUe4eJ7JWuu7/Nbf6yip2eq7BQKZ9hAH/se/OSZNYsEkZ4pxUc8W5U3uAZImUwC6L74SM0jBZIuD mQhOYX6sZZ6urIn/MYlj4/hqSBFS4vTK7nXRLmtr7+5T5U5srVseUiYc+l9pu9/XD8zGIu+M2xEd 41NwP44GDQTQm0bFljRv5fSblwmi56YHPFQUIh2RZNX3kOJgeyQ3enw5uY+7ocKRVP38hpnffliL lJcO6TtHWnElS3pACbTQM0RHJox3zqU3q6K3c= Archived-At: Subject: Re: [openpgp] Privacy-preserving Transferable Public Keys X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2019 07:22:30 -0000 > Direct key signatures can of course be used but we do not have much > experience with them. I fear that some OpenPGP implementations will not > work correctly if only such a direct key self-signature is available. Agreed, we can't change that very easily. But we can progress by allowing partial TPKs during transit, see how implementations react, and build from there. - V From nobody Fri Jun 14 01:40:13 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0169C120110 for ; Fri, 14 Jun 2019 01:40:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gnupg.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OPfsnp2rvkwM for ; Fri, 14 Jun 2019 01:40:10 -0700 (PDT) Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45F73120086 for ; Fri, 14 Jun 2019 01:40:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnupg.org; s=20181017; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=x80Hncl4gCHKQPPYqq8glKa/KI+5c/cdHr219k+7PzY=; b=dAdFHZUbIaxzkUbu9t1SK74mYJ 0dlmQjwN6zDJiT4Sp9R8aZFZeVN78x0M0NVFH7FPXgbZ6o83x7XFMRWYB/DrgaSsBoXqOgnVb9mJA M9UjLDpnO29mjLZe+8JD6L0Ba32ldf72lZNY843hlLlXwibjFqZgasSzMn9qn9oEkI0Y=; Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.89 #1 (Debian)) id 1hbhkm-00051C-Ik for ; Fri, 14 Jun 2019 10:40:08 +0200 Received: from wk by wheatstone.g10code.de with local (Exim 4.92 #5 (Debian)) id 1hbhhn-0004As-Kv; Fri, 14 Jun 2019 10:37:03 +0200 From: Werner Koch To: Vincent Breitmoser Cc: openpgp@ietf.org References: <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> Organisation: GnuPG e.V. X-message-flag: Mails containing HTML will not be read! Please send only plain text. Mail-Followup-To: Vincent Breitmoser , openpgp@ietf.org Date: Fri, 14 Jun 2019 10:36:57 +0200 In-Reply-To: <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> (Vincent Breitmoser's message of "Fri, 31 May 2019 09:42:21 +0200") Message-ID: <875zp8r2ae.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=Defcon_nuclear_sneakers_FSF_Forte_TDR_Meth_Lab_CBNRC_Islamist_Nogale"; micalg=pgp-sha256; protocol="application/pgp-signature" Archived-At: Subject: Re: [openpgp] Privacy-preserving Transferable Public Keys X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2019 08:40:12 -0000 --=Defcon_nuclear_sneakers_FSF_Forte_TDR_Meth_Lab_CBNRC_Islamist_Nogale Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Fri, 31 May 2019 09:42, look@my.amazin.horse said: > A) Distribute updates to subkeys and the primary key (expiry, revocation,= etc), > without revealing the key's UserIDs. Easy for new and revoked subkeys. For full revocations gpg has always allowed to import a standalone revocation self-signature. For changing expiration or preferences the user id is required or the client needs to trial verify all new self-signatures. The server won't be able to check the self-signatures if it has no access to the user-id. This will spam the users and server with bogus self-signatures. Right, direct key signatures can be used but I we have not much experience with them. > B) Distribute updates to UserIDs (expiry, revocation, etc) without reveal= ing the > UserID itself. This is the same as A modulo direct key signatures. > C) Create, distribute, and use keys without attaching UserIDs or other > designation metadata at all Why should one want to do that? The user id (i.e. mail address or DNS name) is important meta data. However, it is better to use a direct mapping from the user id to the key than any arbitrary mapping as done by keyservers. Then any updates to the user id can be retrieved via that userid->keyblock service. > done in dkg's "abuse resistant keyserver" document, recently on this list. The simplest way to avoid DoS on keyservers is to disallowing searching by user id. That is for about 20 years standard at MTAs and although not a perfect solution it has helped a lot against mail address harvesting by asking MTAs. Shalom-Salam, Werner =2D-=20 Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. --=Defcon_nuclear_sneakers_FSF_Forte_TDR_Meth_Lab_CBNRC_Islamist_Nogale Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQTX/8BjtAoilLlm20f/gK6dHew1jQUCXQNcqQAKCRD/gK6dHew1 jROAAQCdMymb08t1joTLaOjcMWHe5G94Bi7Qe27tbAxQ4ube/QEA9LqTUzkdWvZ4 ebA+dHQximnYxXRfC2ghdDHljdIHcgc= =HPfG -----END PGP SIGNATURE----- --=Defcon_nuclear_sneakers_FSF_Forte_TDR_Meth_Lab_CBNRC_Islamist_Nogale-- From nobody Sun Jun 16 05:14:55 2019 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BA8112016D for ; Sun, 16 Jun 2019 05:14:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=my.amazin.horse Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EwDTRcVvvRfU for ; Sun, 16 Jun 2019 05:14:52 -0700 (PDT) Received: from mail.mugenguild.com (mugenguild.com [5.135.189.5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E7FC120132 for ; Sun, 16 Jun 2019 05:14:52 -0700 (PDT) Received: from localhost (i59F77C53.versanet.de [89.247.124.83]) by mail.mugenguild.com (Postfix) with ESMTPSA id 772905FA68; Sun, 16 Jun 2019 14:14:49 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=my.amazin.horse; s=mail; t=1560687289; bh=dX7dBFZck3KhPpRZN06DdQ5dTmhu+AMsKBIm30hb/c8=; h=Date:From:To:Subject:Autocrypt:From; b=gnraw9v9ePWClJMYZ/4ScOrENP1Xvl+jqiWrLRoOK8frHnSiS2lRiv/21bNeQPH7R ILJEv0825A1GFprcphLrmZGDQTeaU8qkLYYRYVM/L5ZvUhnf7i3zg0maXhAEHuZagz nbcmVh9V7qFoTmtswhuOUx15GN9exra8Y9VaInv4= Message-Id: <36ADCM392D14B.2Y0T6NRCQ65RO@my.amazin.horse> In-Reply-To: <875zp8r2ae.fsf@wheatstone.g10code.de> References: <875zp8r2ae.fsf@wheatstone.g10code.de> <3LBKVNEMXC3DV.3JS3W5ZE7TFEZ@my.amazin.horse> Date: Sun, 16 Jun 2019 14:14:48 +0200 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Vincent Breitmoser To: Werner Koch Cc: openpgp@ietf.org Autocrypt: addr=look@my.amazin.horse; keydata=mQINBFAB3UABEADCyB/vbIBA3m1Bwc yjTieEMLySwYgt54EQ2hglOocdtIhqC+b05t6sLSkwx2ukxrU2cegnCBkdyF/FZ/+Et638CUEBbf 4bjplwpt2IPLazQgjkwjMuhz0OcYDpMhwimTvh3mIl+0wzpOts6mEmMw0QZdl3RXvIW+NSynOn7q mz/fAv4Htt6lv2Ka0s6R2voyi+5U7CcIqizPad5qZVn2uxmovcFreTzFt6nk37ZbbTfvA3e5F0bR RQeH3viT5XxpJF4Y76v/Ua+5N3Kd18K0sX85rD1G7cmxR2CZ5gW1X24sDqdYZdDbf10N39UIwjJH PTeuVMQqry792Ap0Etyj135YFCE0loDnZYKvy2Y1i0RuEdTUIonIHrLhe2J0bXQGbQImHIyMgB9/ lva8D+yvy2gyf2vjRhmJEEco7w9FdzP7p3PhKrUiTjRsjHw8iV8LOCFx9njZOq9mism9ZZ16tZpx 9mXOf11HcH1RtVuyyQRS/4ytQPzwshXdSDDW6Btkmo9AbZQKC54/hSyzpp3Br2T2xDH7ecnonDB/ jv8rWuKXSTbX3xWAIrNBNDcTYaNe4jkms4HF7jJE19eRlqsXMMx6Fxvrh4TtKICwJYJ3AUmXrK3X Ti/mjqYfJ1fpBn54rWs8nhSR1fuZPD+aMlcP8BDUPlNKPKtj0DGSh3/VlnnwARAQABtClWaW5jZW 50IEJyZWl0bW9zZXIgPGxvb2tAbXkuYW1hemluLmhvcnNlPokCOAQTAQIAIgUCVTNZmgIbAwYLCQ gHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQe9GDIN6t+hHcVg//aeiijNqsQ3pjbFQn3VvND7hNfJ vrVcLZ+U4kOzXPF818aVdOnDyNXyE17vBDDcvaZ730sCsZIRZJ3KhUJ+nPvdttKjUIGLARmx+pA3 Jl3IIv2uLtOb3I0TMuyfIGJVGF+q10/CeDMKVjKlmyOVrR0opkel+KEoN7VLq3Hf3zPKENO1HBgp LHeP31tlb9cgs+u4o2wLrVe9myHbuFBW7EjWbSvdz2zliwbsFeFVLMNcWrKAU0GkkiH69SgnwmXU RkhGma4L27GLtkHHufsxfbcPqPtmtCttsGZU4EmrghGUqVyDOxnn8ZqybzLrRfpin+OCIX+aHJz5 r2L8qtrP0LorNMX3Gopd26vfhNvq/wq8xk++bW1R5FmkaUhx9h+DhO2ybcg7p/E8JHc8zrWv+bb3 0o9lkrOaU8GxXrgtb1cjtbb+MxFvjm0Elw7MSZDG7sF/APFU6cwuIA9Nai/OGAUCSt/W2ecS8Zox cWWbGSEiDvjtEctkpmHjfVuGoL34966Olm41VdH+NjgoSYUJKx4Mty8DRcZxdyoXll84LvDkEEYK ZqOIACsJf8CDFvUkmhXc+moCj15Yxtj3/RslRVEiOUyrpDwB72zWcZG8YnzoyGxhcRIc/gFejO/y SI8bzCpYngeuTb5NjFG+ChGiInHbQcFeHBlaHtKi2o/B5axIO5Ag0EVDvOgQEQALJby/ztliToGE u1lslvWQUQ6teKZVUQ7hy9bM4N83G0AGLatUBHtY6PkJBe4XkIw3sK7LoFCV2W4GSt4zWp9l+kG3 /J8Ow7EFjN0F7DrCg0M0lMg9dQz9jYSoBR8skaH3BRzCq9AKIVKV94poL/G65289L7zKDHoZnnyF qbBtedYZir0SZx+kiouZ1qnmxRPaYmH2fkuiuvYEAyzLDLYM8F5gQhdZM4YVtuvSICYPet0z4CDi JX/vZmDi3AzzoEVaKeAM/0H9f9Ni547J2+8dZSllgTrA+fq0aMJVScAObIxTAQtEq0DoNBzPpVrm W10b4bmgePrAvNkifqSr5StymSBgwvoeW6GrJiyN4XhoLOadZzwgjqioR1nXw5tXtrr5sYdkZ06b 1WWHkxtu1hFTdLC7RYNxY07ytLNM+C2lplCwCwlWB7RwI9BL1Dhre4kv8uaaX2Gksaq9mDf9MSDW qQ0TJ/RAiwMGmFrzBEYI1J2Oyeshi/dqW4/OiZAukOIlxOnt6u8zU2KL6Qjxqqna0oTbS4Zv3fRd YkuUCL6CDEJdkuRAiW+Gw+lKcMjXqApEqixhaDkoB/kwtu+2gIFTzAxMfwFN1YtNc0kJZWnFkGIW MrrwTcOwAFzlFz7wn/EyMFtg+ERcqMX0+olXDwM8MODI2+BzulPuEDEteCw09hABEBAAGJAh8EGA ECAAkFAlQ7zoECGwwACgkQe9GDIN6t+hFjuQ//UQyg49f8TytUYQaBb8R0UfI+KhQFs1Nsz2z8a3 0CD1MeiHHYWdAcomVvTkg4g5LbnYHVDrj/XagY3FN/AIE97usFbsTG+rsWAOLi7N2dN2ehWZ634k MvrgyC9uTiOdkw31+B8K5MpyySgD8e6SAzRfiu06/bcQOUyJifw8Hudpj9by4uyGhSH+kHu4afrp OduUighbsGFtcuRwwQ/w/oSk68XvPUgiOQWMZh/pVoXdFyFvrt/hgArCi8dfy5UPK58nl7jPnu/I uQXrJ50nNAFIIxPVeo2/B83KAnEZPU+qWZsdba0V+FIIQQVizLtQFMuJJk4/UTAOfJ2tBpQ9PADX 6/scqDE7unXNWdxcHTjK7KmWjXC8CyhGOx8V/rb7Ial4mZo4cTED6SNlO7dV1XYwnSctL2HCYNM3 RUe4eJ7JWuu7/Nbf6yip2eq7BQKZ9hAH/se/OSZNYsEkZ4pxUc8W5U3uAZImUwC6L74SM0jBZIuD mQhOYX6sZZ6urIn/MYlj4/hqSBFS4vTK7nXRLmtr7+5T5U5srVseUiYc+l9pu9/XD8zGIu+M2xEd 41NwP44GDQTQm0bFljRv5fSblwmi56YHPFQUIh2RZNX3kOJgeyQ3enw5uY+7ocKRVP38hpnffliL lJcO6TtHWnElS3pACbTQM0RHJox3zqU3q6K3c= Archived-At: Subject: Re: [openpgp] Privacy-preserving Transferable Public Keys X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Jun 2019 12:14:54 -0000 Hi Werner, thanks for your response! > > A) Distribute updates to subkeys and the primary key (expiry, revocation, etc), > > without revealing the key's UserIDs. > > Easy for new and revoked subkeys. Easy how? You mean by allowing import of subkeys from TPKs without user ids? I'm a bit confused here: in the patch series I submitted to GnuPG towards that effect, said you weren't happy with this approach and referred to this thread. Perhaps I misunderstood. > Right, direct key signatures can be used but I we have not much > experience with them. Agreed. There are a bunch of details that would have to be figured out for this approach. I hope we can agree though that the idea of per-userid preferences ("this user id prefers Twofish, this other one AES") causes more problems and inconsistencies than it is worth. > Why should one want to do that? The user id (i.e. mail address or DNS > name) is important meta data. User IDs have value when a key wants to publicly claim a designation, and this is necessary for WoT style workflows where people sign this binding. But this use case hasn't exactly stood the test of time. With key discovery mechanisms like Autocrypt or WKD (the future!), we don't really depend on user ids anymore. Clients that have domain knowledge of the context that keys are used in (e.g. email clients) can assign much more useful labels than openpgp implementations themselves. This isn't just theory: OpenKeychain and K-9 associate keys with email addresses from Autocrypt keys independently from user ids, and can even work without user ids altogether. Enigmail maintains a similar mapping, and it is a central part of the Autocrypt spec. Sequoia uses a "pet names" concept that works similarly. I also think this is basically what GnuPG does with its TOFU trust model, at least that's what the database structure looks like. All of that said, I don't want to push super hard towards getting rid of user ids right now, or even at all. Perhaps we never can get that far. But thinking about where we can reduce metadata that isn't strictly necessary is a good thing, so yes I would welcome if we converged in a direction that reduced our reliance on user ids a bit. Moving from user ids to direct key signatures is probably too difficult in terms of backwards compatibility. But "unstated user ids", as similarly suggested in the abuse-resistant-keyserver draft, could be a good compatible step in this direction. - V