Re: pgp signing in van

Ted Lemon <Ted.Lemon@nominum.com> Tue, 10 September 2013 03:44 UTC

Return-Path: <Ted.Lemon@nominum.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB6121F99F3 for <ietf@ietfa.amsl.com>; Mon, 9 Sep 2013 20:44:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.479
X-Spam-Level:
X-Spam-Status: No, score=-106.479 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPj5js+iaqw3 for <ietf@ietfa.amsl.com>; Mon, 9 Sep 2013 20:44:52 -0700 (PDT)
Received: from exprod7og118.obsmtp.com (exprod7og118.obsmtp.com [64.18.2.8]) by ietfa.amsl.com (Postfix) with ESMTP id 3D6E921E8083 for <ietf@ietf.org>; Mon, 9 Sep 2013 20:44:52 -0700 (PDT)
Received: from shell-too.nominum.com ([64.89.228.229]) (using TLSv1) by exprod7ob118.postini.com ([64.18.6.12]) with SMTP ID DSNKUi6Vsk+jC/KrUki6ZzwpuQyDe3u0iV8J@postini.com; Mon, 09 Sep 2013 20:44:52 PDT
Received: from archivist.nominum.com (archivist.nominum.com [64.89.228.108]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by shell-too.nominum.com (Postfix) with ESMTP id 9C6EA1B8247 for <ietf@ietf.org>; Mon, 9 Sep 2013 20:44:50 -0700 (PDT)
Received: from webmail.nominum.com (cas-01.win.nominum.com [64.89.228.131]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by archivist.nominum.com (Postfix) with ESMTPS id 5099B190074; Mon, 9 Sep 2013 20:44:49 -0700 (PDT) (envelope-from Ted.Lemon@nominum.com)
Received: from MBX-01.WIN.NOMINUM.COM ([64.89.228.133]) by CAS-01.WIN.NOMINUM.COM ([64.89.228.131]) with mapi id 14.02.0318.004; Mon, 9 Sep 2013 20:44:43 -0700
From: Ted Lemon <Ted.Lemon@nominum.com>
To: Paul Wouters <paul@nohats.ca>
Subject: Re: pgp signing in van
Thread-Topic: pgp signing in van
Thread-Index: AQHOqpqEB3VH/4NMm0OmqkHjUm9ALJm5aiMAgABaqYD//9WJAIAARlSA///KM4CAAFZ3gIAC1QGAgAAEoYCAAPmWgIAAFPEAgABoNQCAAAGxAIAAV/cAgAAiq4CAAAJIgA==
Date: Tue, 10 Sep 2013 03:44:41 +0000
Message-ID: <8D23D4052ABE7A4490E77B1A012B63077527E807@mbx-01.win.nominum.com>
References: <m2zjrq22wp.wl%randy@psg.com> <2309.1378487864@sandelman.ca> <522A5A45.7020208@isi.edu> <CA2A6416-7168-480A-8CE1-FB1EB6290C77@nominum.com> <522A71A5.6030808@gmail.com> <6DE840CA-2F3D-4AE5-B86A-90B39E07A35F@nominum.com> <CAPv4CP_ySqyEa57jUocVxX6M6DYef=DDdoB+XwmDMt5F9eGn1A@mail.gmail.com> <18992.1378676025@sandelman.ca> <8D23D4052ABE7A4490E77B1A012B63077527BC7A@mbx-01.win.nominum.com> <13787.1378730617@sandelman.ca> <8D23D4052ABE7A4490E77B1A012B63077527C8AB@mbx-01.win.nominum.com> <3CC64F25-183D-4E8D-868F-A0AAC2B2D04F@danyork.org> <8D23D4052ABE7A4490E77B1A012B63077527D64A@mbx-01.win.nominum.com> <522E76AA.4050706@gont.com.ar> <alpine.LFD.2.10.1309092335050.438@bofh.nohats.ca>
In-Reply-To: <alpine.LFD.2.10.1309092335050.438@bofh.nohats.ca>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.1.10]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <2DE498997289F34CB6B067BFB2DA859E@nominum.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: Fernando Gont <fernando@gont.com.ar>, IETF discussion list <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Sep 2013 03:44:59 -0000

On Sep 9, 2013, at 11:36 PM, Paul Wouters <paul@nohats.ca> wrote:
> Related (does not take away the full pain):

Nice.   I think section 4.2 is slightly too pessimistic, but not harmfully so.   It might be worth talking about leap-of-faith validation as well as web-of-trust validation.