Re: Support WKD (and WKS) for @debian.org email addresses?

2018-11-07 Thread Peter Palfrader
On Wed, 07 Nov 2018, W. Martin Borgert wrote: > Do we want WKD for debian.org, like gentoo.org and kernel.org? > > TIA for your opinions & Cheers I'd look at code that generates WKD and dane information for users that enable it in ldap. -- | .''`. ** Debian

Re: Support WKD (and WKS) for @debian.org email addresses?

2018-11-07 Thread Ian Jackson
Guilhem Moulin writes ("Re: Support WKD (and WKS) for @debian.org email addresses?"): > On Wed, 07 Nov 2018 at 18:20:16 +, Ian Jackson wrote: > > Personally I think the hash is bizarre. Why make this protocol depend > > on an obsolete hash function ? One could

Re: Support WKD (and WKS) for @debian.org email addresses?

2018-11-07 Thread Guilhem Moulin
Hi, On Wed, 07 Nov 2018 at 18:20:16 +, Ian Jackson wrote: > Personally I think the hash is bizarre. Why make this protocol depend > on an obsolete hash function ? One could just url-encode the email > address. The server could deal with case-folding etc. Dunno if you'll find the arguments

Re: Support WKD (and WKS) for @debian.org email addresses?

2018-11-07 Thread Ian Jackson
W. Martin Borgert writes ("Support WKD (and WKS) for @debian.org email addresses?"): > One way to help senders getting the real receivers key is WKD (web key > directory). That is one HTTPS URL per email address, e.g. a static > directory with PGP key files. (See https:/

Support WKD (and WKS) for @debian.org email addresses?

2018-11-07 Thread W. Martin Borgert
Hi, just testing the waters, whether this is something people like or not: As we all know, false PGP keys can easily be forged for any given email address and uploaded to key servers. We've been there, even with the correct short key ids and equally faked signatures! One way to help senders