Hi,

I just read the dane-openpgpkey document and discussed it a bit with a friend. And now, we have a question. I must say, I haven't followed the discussions on this mailing list much lately, but I couldn't find an answer to this question by quickly browsing through the openpgp-related threads.

From what I can tell, this document only describes how to publish and retrieve a key in DNS/DNSSEC, i.e. in what format. I don't see any mention of a procedure by which a key would get published. Since the domain would be controlled by the mail provider, the user cannot do this directly. So, how does a user go about getting his public key published in the DNS? What kind of interaction do you envision between the service provider and the mail user? Some kind of provider-specific web interface? Would it be useful to devise some standardized (sub-)protocol for this, so that a MUA can easily arrange this for the user (e.g. just after it generated the key pair)?

Regards,

Stephan.

_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to