German ct magazine postulates death of pgp encryption

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Sun Mar 1 16:38:20 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/01/2015 04:35 PM, Patrick Brunschwig wrote:
> On 01.03.15 15:58, Kristian Fiskerstrand wrote:
>> On 03/01/2015 03:41 PM, Patrick Brunschwig wrote:
>>> On 27.02.15 20:56, Werner Koch wrote:
>>>> On Fri, 27 Feb 2015 17:26, patrick at enigmail.net said:
> 


..

> 
>> In general I believe this to be an insufficient form of 
>> identification that really doesn't provide much of anything
>> useful, but at least the PGP keyserver does it reasonably sane in
>> its methodology by creating a signature from their CA on the
>> key. Whether you put any merit to having such a CA signature or
>> not is left up to the user (excluding for now the "fun" related
>> to the spammy number of signatures from it)
> 
> Yes, I know. The re-confirmation every few months together with 
> re-signing the keys is among the things I dislike about 
> keyserver.pgp.com. But in general, I think that keyservers need to
> go in that direction if we want to enable easy use of OpenPGP in
> email (which requires in some way or another to download missing
> keys automatically).

You wouldn't need the keyservers to be involved in this at all. Anyone
could set up such a mail verification CA outside of the keyserver network.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
"The best way to predict the future is to invent it"
(Alan Kay)
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJU8zJoAAoJEP7VAChXwav6vlgH/3ZBDMyOF4TfkDaBb+N5f45n
crBiableZ/2I5Flq/dR5UierB1FtEPKKifdPNG/oa36gqLfFHeVpP8DGOTTGyl5S
pkhR/1SNSKIpQyfCe0nOTeaxsCR0M6lmCudrtFsUf0kokTZ8SnWgwgonP5AQPde6
w+UCXUJmjwQechR6donoHOye19eo6SQI1byo0LpKO1NMl+5ErpCFOJrcnwDE93n1
nEWJA5hytTfM6cvXJkgUJ64WogRxS7xRUbQ4dTVG3wEPl9H+IaIOMCxKWGcq7SNC
hSDa/evtdtWpjo7zSLo2lpVf03fM020ax1PHLBiItJnTAszhvWkA9bfZGrdB1mg=
=EW11
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list