Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-12 Thread Daniel Kahn Gillmor
On 04/11/2013 09:13 AM, Stefan Schlott wrote: > True, the PGP file structure encapsulates the signature within the > encryption (in contrast to S/MIME, which does it vice versa). But the > standard PGP binary will strip both in one step, so keeping the > signature won't work out of the box (at lea

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-11 Thread Stefan Schlott
On 11.04.2013 14:35, Richard Damon wrote: >> Next problem: Mailman will have to decrypt the message and re-encrypt it >> for each recipient. This also strips the signature of the original >> sender. How do you show to the recipients that the original message was >> signed (in a way which cannot be

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-11 Thread Richard Damon
On 4/11/13 3:23 AM, Stefan Schlott wrote: > On 11.04.2013 06:19, Joost van Baal-Ilić wrote: > >> I am Joost van Baal-Ilić. I create a PGP keypair with ID Barry Warsaw. I >> sent >> the public key to the list server. I sent a mail, signed with the Barry-key, >> encrtypted to the listkey, with Fr

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-11 Thread Joost van Baal-Ilić
Hi (and hi Stefan!), On Thu, Apr 11, 2013 at 09:23:35AM +0200, Stefan Schlott wrote: > On 11.04.2013 06:19, Joost van Baal-Ilić wrote: > > > I am Joost van Baal-Ilić. I create a PGP keypair with ID Barry Warsaw. I > > sent > > the public key to the list server. I sent a mail, signed with the

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-11 Thread Stefan Schlott
On 11.04.2013 06:19, Joost van Baal-Ilić wrote: > I am Joost van Baal-Ilić. I create a PGP keypair with ID Barry Warsaw. I > sent > the public key to the list server. I sent a mail, signed with the Barry-key, > encrtypted to the listkey, with From: Barry's email address, to the list. > The lis

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-10 Thread Mark Sapiro
Marcos Chavarría Teijeiro wrote: > 4) MailMan decrypt the received message and check if the sign is correct > (with the stored public user public key). If the sign is correct, it sends > a message to every mail-list subscripter encrypted with each user public > key. As Stephen suggests in anoth

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-10 Thread Joost van Baal-Ilić
Hi Marcos, On Wed, Apr 10, 2013 at 10:04:04PM -0400, Daniel Kahn Gillmor wrote: > On 04/09/2013 07:55 PM, Marcos Chavarría Teijeiro wrote: > > > The problem is that I'm not sure if I understand the idea. This is how I > > see it: > > 1) Users summit their public key to MailMan server when they r

Re: [Mailman-Developers] OpenPGP Integration on GSoC

2013-04-10 Thread Daniel Kahn Gillmor
On 04/09/2013 07:55 PM, Marcos Chavarría Teijeiro wrote: > The problem is that I'm not sure if I understand the idea. This is how I > see it: > 1) Users summit their public key to MailMan server when they register to > mail list. > 2) The user can get MailMan Server public key > 3) When an user