Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Stefan Claas
Konstantin Ryabitsev wrote: > On Fri, Jun 14, 2019 at 05:25:05PM +0300, Teemu Likonen wrote: > >> The current shortcoming is stripping third-party signatures. So Web > >> of > >> Trust wouldn't work (for good reasons described in the FAQ [0]). For > >> some people this may be surprising. > > > >I

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Vincent Breitmoser
> Maybe you can consider in the future at least to allow CA sigs. > Those would be only one sig per key and the CA signing keys > could be stored in your database as reference as well. > > Currently 3 CAs come to mind: Governikus, Heise and CAcert. Interesting thought! I would be a bit worried

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Andrew Gallagher
> On 16 Jun 2019, at 12:51, Vincent Breitmoser wrote: > > >> Maybe you can consider in the future at least to allow CA sigs. >> Those would be only one sig per key and the CA signing keys >> could be stored in your database as reference as well. >> >> Currently 3 CAs come to mind: Governikus,

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Andrew Gallagher
> On 15 Jun 2019, at 22:41, Vincent Breitmoser wrote: > > >> For a start, it only supports email userids - so it is incompatible with >> monkeysphere. > > Indeed! This is a use case that would be interesting to explore though, feel > free to open an issue on our tracker if you want to help thi

Re: OpenPGP key verification + legal framework

2019-06-16 Thread Viktor Ageyev
On 10/11/2018 13:40, MFPA wrote: Many people would not be prepared to do this because Google now demands a phone number in their sign-up process. Nobody needs a phone number in order to provide an email account, it is just an additional piece of personal information for Google to abuse. We a

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Stefan Claas
Vincent Breitmoser wrote: > > > Maybe you can consider in the future at least to allow CA sigs. > > Those would be only one sig per key and the CA signing keys > > could be stored in your database as reference as well. > > > > Currently 3 CAs come to mind: Governikus, Heise and CAcert. > > Inte

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-16 Thread Robin H. Johnson
On Sun, Jun 16, 2019 at 04:10:34PM +0200, Stefan Claas wrote: > Vincent Breitmoser wrote: > > > > > > Maybe you can consider in the future at least to allow CA sigs. > > > Those would be only one sig per key and the CA signing keys > > > could be stored in your database as reference as well. > >