Re: local signatures: should they be importable by default in some cases?

2010-06-22 Thread Daniel Kahn Gillmor
On 06/22/2010 02:00 AM, Doug Barton wrote: What do you think local signatures are, and what do you think they mean? (And no, I'm not trying to be snarky, you're asking about intuition, so it makes sense to address the base assumptions.) non-exportable certifications are simply certifications

Re: openpgp to sexp conversion ..

2010-06-22 Thread Werner Koch
On Tue, 22 Jun 2010 02:34, r...@sixdemonbag.org said: Explain 'sexp', please? When I hear someone talk about sexps, I think they're talking about LISP S-expressions. I don't know if that's what you have in mind. This is likely about the S-expression format as used with spki. Libgcrypt uses

Re: openpgp to sexp conversion ..

2010-06-22 Thread Werner Koch
On Tue, 22 Jun 2010 02:34, r...@sixdemonbag.org said: My name is Kahnan and I am looking to convert openpgp keys in to sexp including key data .. [I have not seen Kahnan mail (maybe spam filter issue). ] The GnuPG SVN trunk has a lot of code to do the conversion. For example:

Re: local signatures: should they be importable by default in some cases?

2010-06-22 Thread David Shaw
On Jun 22, 2010, at 12:25 AM, Daniel Kahn Gillmor wrote: On 06/21/2010 06:32 PM, David Shaw wrote: On Jun 21, 2010, at 6:11 PM, Alex Mauer wrote: I see that there is currently the import-option import-local-sigs which obviously allows the import of key-signatures marked non-exportable.

Re: local signatures: should they be importable by default in some cases?

2010-06-22 Thread Jameson Rollins
On Tue, 22 Jun 2010 09:27:46 -0400, David Shaw ds...@jabberwocky.com wrote: On Jun 22, 2010, at 2:36 AM, Daniel Kahn Gillmor wrote: Can you elaborate on the usage you're describing? I'm thinking of a situation involving three people: Alice, Bob, and Charlie. Alice has met Bob in

Re: local signatures: should they be importable by default in some cases?

2010-06-22 Thread Jameson Rollins
On Tue, 22 Jun 2010 09:51:58 -0400, Jameson Rollins jroll...@finestructure.net wrote: I think the situation Daniel points out is one of the better usages for local signatures, and probably the main reason for having them in the first place. Actually, looking at the RFC 4880 now, I see that

Re: IDEA Status?

2010-06-22 Thread Dan Mahoney, System Admin
On Tue, 22 Jun 2010, Robert J. Hansen wrote: On 6/22/10 10:09 PM, Dan Mahoney, System Admin wrote: Is this very old and it's now supported? Or is it still not in for some other reason (either oversight, legal, or other). By modern standards, IDEA is not considered a promising cipher. There

Using the clean function (and the PGP Global Directory)

2010-06-22 Thread Dan Mahoney, System Admin
It seems there's two interesting problems which inter-relate. The first is PGP corporation's global directory, which seems to operate orthogonally from every other keyserver I've seen. It's HTTP-only, not queryable by any of the open-source clients (in fact, it doesn't support wildcard

Re: IDEA Status?

2010-06-22 Thread David Shaw
On Jun 22, 2010, at 10:09 PM, Dan Mahoney, System Admin wrote: The FAQ for IDEA states that The official GnuPG distribution does not contain IDEA due to a patent restriction. The patent does not expire before 2007 so don't expect official support before then.

Re: IDEA Status?

2010-06-22 Thread Robert J. Hansen
On 6/22/10 10:30 PM, Dan Mahoney, System Admin wrote: Could the FAQ be updated then, assuming you speak with some authority? I am correct, but I am not authoritative. I'm not one of the GnuPG developers, so I have no authority to make declarations on behalf of GnuPG.

Re: IDEA Status?

2010-06-22 Thread Robert J. Hansen
On 6/22/10 10:39 PM, David Shaw wrote: I'm not sure about the 2007 patent expiration - I recall it being right around now, actually (2010-2011). A little digging around revealed the United States patent expiration: January 7, 2012. I am not a patent attorney, I don't pretend to be an

Re: Using the clean function (and the PGP Global Directory)

2010-06-22 Thread David Shaw
On Jun 22, 2010, at 11:02 PM, Dan Mahoney, System Admin wrote: It seems there's two interesting problems which inter-relate. The first is PGP corporation's global directory, which seems to operate orthogonally from every other keyserver I've seen. It's HTTP-only, not queryable by any of

Re: Using the clean function (and the PGP Global Directory)

2010-06-22 Thread Dan Mahoney, System Admin
On Tue, 22 Jun 2010, David Shaw wrote: On Jun 22, 2010, at 11:02 PM, Dan Mahoney, System Admin wrote: It seems there's two interesting problems which inter-relate. The first is PGP corporation's global directory, which seems to operate orthogonally from every other keyserver I've seen.

Re: Using the clean function (and the PGP Global Directory)

2010-06-22 Thread Dan Mahoney, System Admin
On Tue, 22 Jun 2010, Dan Mahoney, System Admin wrote: On Tue, 22 Jun 2010, David Shaw wrote: On Jun 22, 2010, at 11:02 PM, Dan Mahoney, System Admin wrote: It seems there's two interesting problems which inter-relate. The first is PGP corporation's global directory, which seems to operate

Re: IDEA Status?

2010-06-22 Thread David Shaw
On Jun 22, 2010, at 11:25 PM, Robert J. Hansen wrote: On 6/22/10 10:39 PM, David Shaw wrote: I'm not sure about the 2007 patent expiration - I recall it being right around now, actually (2010-2011). A little digging around revealed the United States patent expiration: January 7, 2012. I

Re: Using the clean function (and the PGP Global Directory)

2010-06-22 Thread David Shaw
On Jun 23, 2010, at 12:03 AM, Dan Mahoney, System Admin wrote: Are you sure about that? clean strips off useless signatures (useless being defined as an invalid signature, a superseded signature, a revoked signature, and a signature from a key that isn't present on the keyring).