Re: [Enigmail] Rules for attaching public key

2016-06-04 Thread Doug Barton

On 06/01/2016 10:52 AM, Daniel Kahn Gillmor wrote:

On Wed 2016-06-01 13:46:28 -0400, Bob Henson wrote:

On 01/06/2016 6:32 pm, Hakuch wrote:

are there any possibilities to create rules for public key attaching?
Currently, I send always my public key to everyone, even if I sent it
already 2000 times to a specific person.


Why not just put your key number in your signature and let them get it
from a keyserver if they want it?


  * some people don't want their keys on the keyservers unless they've
been revoked.

  * not everyone has access to a keyserver (i've recently recieved mail
from someone asking for my key by mail because at work they can't get
through to the keyservers)

  * some people fetch their mail, disconnect, and read and respond to it
while offline, so having the local key is handy.


Those are all reasons for the correspondents to arrange key exchange 
between themselves. None of them are excuses for the misguided "attach 
my key to every message" option.


Doug


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Rules for attaching public key

2016-06-01 Thread Daniel Kahn Gillmor
On Wed 2016-06-01 16:28:51 -0400, Ludwig Hügelschäfer wrote:
> On 01.06.16 19:52, Daniel Kahn Gillmor wrote:
>
>> I agree that keeping some state (or being able to infer state) about
>> whether your peer likely has your key would be a useful thing.  I'm not
>> sure what the right rules would be to make this relatively seamless and
>> not-confusing, though.
>
> One thing is clear: If the local installation has already received
> encrypted mails from this address, it is no longer necessary to send the
> own key again. Not sure how to implement this, this would require some
> sort of mini-addressbook.

Can we piggy-back enigmail's state on thunderbird's own addressbook?

Also, if the user's own certificate (or their encryption-capable subkey)
was due to expire, but they updated the expiration date (or issued a new
encryption-capable subkey), should they re-send their certificate to the
peer?

--dkg

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Rules for attaching public key

2016-06-01 Thread Daniel Kahn Gillmor
On Wed 2016-06-01 13:46:28 -0400, Bob Henson wrote:
> On 01/06/2016 6:32 pm, Hakuch wrote:
>> are there any possibilities to create rules for public key attaching?
>> Currently, I send always my public key to everyone, even if I sent it
>> already 2000 times to a specific person.
>
> Why not just put your key number in your signature and let them get it
> from a keyserver if they want it?

 * some people don't want their keys on the keyservers unless they've
   been revoked.
 
 * not everyone has access to a keyserver (i've recently recieved mail
   from someone asking for my key by mail because at work they can't get
   through to the keyservers)

 * some people fetch their mail, disconnect, and read and respond to it
   while offline, so having the local key is handy.

I agree that keeping some state (or being able to infer state) about
whether your peer likely has your key would be a useful thing.  I'm not
sure what the right rules would be to make this relatively seamless and
not-confusing, though.

   --dkg

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Rules for attaching public key

2016-06-01 Thread Bob Henson
On 01/06/2016 6:32 pm, Hakuch wrote:
> are there any possibilities to create rules for public key attaching?
> Currently, I send always my public key to everyone, even if I sent it
> already 2000 times to a specific person.

Why not just put your key number in your signature and let them get it
from a keyserver if they want it?

Regards,

Bob





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net