Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-30 Thread Ryan Hurst
There are free PKIX certs, I offer them to projects like this and StartSSL offers free certs as well so the decision to use something else is not a function of cost. The fact that one needs to operate their own key server to have any confidence is part of the adoption barrier; not the largest f

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-30 Thread Phil Pennock
On 2013-07-30 at 10:29 +0300, Ryan Hurst wrote: > I understand the decision of a PGP solution to not leverage PKIX but > such a decision raises the bar of adoption of PGP by mere mortals even > further than it already is. Nonsense: PGP key retrieval normally doesn't use TLS and is subject to traff

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-30 Thread Ryan Hurst
SNI bases TLS is fine and not special to this; many sites do it. The only place it's not supported is XP and IE which is not terribly likely for users of a key service and frankly you have larger issues if that's he platform you are on. So even with a PKIX based cert chain you could have unique

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-30 Thread Phil Pennock
On 2013-07-30 at 07:51 +0200, Andreas Bürki wrote: > Am 30.07.2013 01:25, schrieb Tony Arcieri: > > Here's the source of the data, if you're curious: > > > > https://sks-keyservers.net/ > > To me as a boring consumer it looks curious, right: > > https://www.ssllabs.com/ssltest/analyze.html?d=sks

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-30 Thread Ryan Hurst
https://www.globalsign.com/ssl/ssl-open-source/ Ryan Hurst Chief Technology Officer GMO Globalsign twitter: @rmhrisk email: ryan.hu...@globalsign.com phone: 206-650-7926 Sent from my phone, please forgive the brevity. On Jul 30, 2013, at 8:51 AM, Andreas Bürki wrote: > > > Am 30.07.2013 01:

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-29 Thread Andreas Bürki
Am 30.07.2013 08:51, schrieb shawn wilson: > On Tue, Jul 30, 2013 at 1:51 AM, Andreas Bürki wrote: >> >> >> Am 30.07.2013 01:25, schrieb Tony Arcieri: >>> Here's the source of the data, if you're curious: >>> >>> https://sks-keyservers.net/ >> >> To me as a boring consumer it looks curious, righ

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-29 Thread shawn wilson
On Tue, Jul 30, 2013 at 1:51 AM, Andreas Bürki wrote: > > > Am 30.07.2013 01:25, schrieb Tony Arcieri: >> Here's the source of the data, if you're curious: >> >> https://sks-keyservers.net/ > > To me as a boring consumer it looks curious, right: > > https://www.ssllabs.com/ssltest/analyze.html?d=s

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-29 Thread Andreas Bürki
Am 30.07.2013 01:25, schrieb Tony Arcieri: > Here's the source of the data, if you're curious: > > https://sks-keyservers.net/ To me as a boring consumer it looks curious, right: https://www.ssllabs.com/ssltest/analyze.html?d=sks-keyservers.net&hideResults=on cheeer, h. > On Mon, Jul 29, 20

Re: [cryptography] OpenPGP adoption post-PRISM

2013-07-29 Thread Tony Arcieri
Here's the source of the data, if you're curious: https://sks-keyservers.net/ On Mon, Jul 29, 2013 at 4:22 PM, Tony Arcieri wrote: > Interesting chart: > > https://pbs.twimg.com/media/BQYA_qWCEAIoUFT.png > > -- > Tony Arcieri > -- Tony Arcieri ___

[cryptography] OpenPGP adoption post-PRISM

2013-07-29 Thread Tony Arcieri
Interesting chart: https://pbs.twimg.com/media/BQYA_qWCEAIoUFT.png -- Tony Arcieri ___ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography