CryptoList - Looking for beta testers

Kenneth Jones kententen at me.com
Mon Sep 23 01:08:01 CEST 2013


On 09/23/2013 04:45 AM, Daniel Kahn Gillmor wrote:
> On 09/22/2013 01:10 PM, Oliver Verlinden wrote:
>> some days ago I had the idea of a pgp compatible mailing list.
>> I know there is a mailman extension which supports pgp encrypted messages out 
>> there, but I wanted ta have a small, fast and easy to configure solution.
> Very cool to see that you've done this work and that you want to see
> something like this happen.  It raises a lot of questions for me,
> though: how does your system know whose keys are whose?  what if a key
> expires?  how does it handle new subscribers?  who gets access to the
> lists?  are they archived?  what about messages that can't be delivered
> right away?  How do i as a user know what keys to encrypt to?  how do i
> as an admin make sure my user's confidential data doesn't leak to
> outside parties?
>
> I'm not saying that mailman is perfect, but there are some legitimate
> reasons that mailman is complex.  Dealing with store-and-forward message
> delivery in a dynamic network is challenging in its own right, let alone
> getting the key management right for lists that deal with crypto.
> Taking on all those tasks and getting them right is a tall order!
>
> Abhilash Raj <raj.abhilash1 at gmail.com> has done a bunch of work on
> Mailman over the last few months, working toward integrating Mailman and
> OpenPGP.  I'm quite sure he would be happy to collaborate with you if
> you're interested in working as part of a team on a project that other
> people will help maintain :)
>
> Regards,
>
> 	--dkg
>
>
>
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
Hmmm... Last two messages from Daniel prompt my Thunderbird/Enigmail
setup that an OpenPGP secret key is needed to decrypt the message (which
nonetheless shows up in cleartext). What's happening? Is it signed with
a public key? Can you do that? Why would one wnt to?
Puzzled,

Ken

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20130923/7ed8ce99/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xE2557AA7.asc
Type: application/pgp-keys
Size: 3600 bytes
Desc: not available
URL: </pipermail/attachments/20130923/7ed8ce99/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: KenTenTen.vcf
Type: text/x-vcard
Size: 456 bytes
Desc: not available
URL: </pipermail/attachments/20130923/7ed8ce99/attachment-0001.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 555 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20130923/7ed8ce99/attachment-0001.sig>


More information about the Gnupg-users mailing list