Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-23 Thread Daniel Kahn Gillmor
On 05/23/2012 11:10 AM, Michael Rogers wrote: Agreed. I'm not trying to argue for or against making indistinguishability of FreedomBox traffic from other TLS traffic a design goal; all I'm trying to do is to point out that if it's a design goal, the Monkeysphere proposal isn't suitable. fwiw,

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-23 Thread Michael Rauch
On 05/21/2012 10:39 PM, Daniel Kahn Gillmor wrote: On 05/20/2012 10:00 AM, Michael Rauch wrote: Has anyone looked into using PGP keys as SSL certificates? Monkeysphere [0] can create a pgp-cert based on the an existing X.509 cert by extracting its RSA key. There's a post on Stackoverflow [1]

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-22 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/05/12 17:15, The Doctor wrote: It depends on whether or not any uniquely identifying information (i.e. not part of standard SSL or TLS handshaking) is exchanged during setup of the connection. Looking briefly at the Monkeysphere proposal

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-21 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21/05/12 21:39, Daniel Kahn Gillmor wrote: RFC 6091 defines a way to use OpenPGP certificates instead of X.509 certificates for TLS sessions: https://tools.ietf.org/html/rfc6091 You might also be interested in this discussion n the

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-19 Thread Michael Rauch
On 05/18/2012 04:35 AM, Nick M. Daly wrote: ... Tor Hidden Services (or other protocols, maybe I2P, GNUnet, etc) can act as static IP addresses. So, if I use that to host the FreedomBuddy service, my friends will be able to find me, because that location is my unchanging, cryptographic

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-19 Thread Kim Alvefur
On Sat 19 May 2012 07:00:13 PM CEST, Nick M. Daly wrote: On Sat, 19 May 2012 15:45:23 +0200, Michael Rauchl...@miranet.ch wrote: this is really cool! by exposing FreedomBuddy as a Tor Hidden Service there's no DNS resolution involved for service discovery. to find a service, the client only

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-17 Thread Nick M. Daly
To answer the what can I use this for type questions I'm getting, I'll try to explain what I'm going to use this for. I'm going to host a FreedomBuddy node as a Tor hidden service. That will let my buddies find me online to use the wiki I'm sharing with them, even as we both move constantly

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-16 Thread Nick M. Daly
On Tue, 15 May 2012 09:35:12 -0500, Nick M. Daly wrote: Hi folks, I'm proud to announce the first release candidate (developer preview) of the Santiago service. Santiago is designed to let users negotiate services without third party interference. By sending OpenPGP signed and encrypted

Re: [Freedombox-discuss] Announcing Santiago Release Candidate 1

2012-05-15 Thread Markus Sabadello
Fantastic, I'm currently at a p2p hackathon in Berlin, but I'll give it a try with my 4 Guruplugs when I get home.. Markus -- Project Danube: http://projectdanube.org Personal Data Ecosystem Consortium: http://personaldataecosystem.org/ On Tue, May 15, 2012 at 4:35 PM, Nick M. Daly