[Medup] Protocol for peer-to-peer synchronization of secret key material (new draft)

[Hernâni Marques (p≡p foundation) <[e-mail]>]

Dear folks

From pEp side, we are describing a protocol for p2p sync of private key
material and provide a finite-state machine which can be implemented for
that task; see draft below.

We use Trustwords for authentication of the pairing; see also this
Thread on Twitter for other ideas on that part:

https://twitter.com/BerndPaysan/status/1149749653727928320

Feedback is very welcome.

In Montreal, we'll also be able to demonstrate how it works, in terms of
message flow and and user interaction (for example, between Android and
Outlook mail clients).

Greets

Hernani

-------- Forwarded Message --------
Subject: New Version Notification for draft-hoeneisen-pep-keysync-00.txt
Date: Sun, 07 Jul 2019 10:50:59 -0700
From: [e-mail]
To: Bernie Hoeneisen <[e-mail]>, Hernani Marques
<[e-mail]>


A new version of I-D, draft-hoeneisen-pep-keysync-00.txt
has been successfully submitted by Bernie Hoeneisen and posted to the
IETF repository.

Name:		draft-hoeneisen-pep-keysync
Revision:	00
Title:		pretty Easy privacy (pEp): Key Synchronization Protocol
Document date:	2019-07-07
Group:		Individual Submission
Pages:		74
URL:
https://www.ietf.org/internet-drafts/draft-hoeneisen-pep-keysync-00.txt
Status:
https://datatracker.ietf.org/doc/draft-hoeneisen-pep-keysync/
Htmlized:       https://tools.ietf.org/html/draft-hoeneisen-pep-keysync-00
Htmlized:
https://datatracker.ietf.org/doc/html/draft-hoeneisen-pep-keysync


Abstract:
   Modern users of messaging systems usually have multiple devices, and
   often desire to send and receive encrypted messages on some or all of
   their devices.  Using encryption on multiple devices often results in
   situations where messages cannot be decrypted on the device used to
   read the message due to a missing private key.

   This document specifies a protocol for secure peer-to-peer
   synchronization of private keys across devices belonging to the same
   user (pEp Key Synchronization Protocol).

   The pretty Easy privacy (pEp) protocols describe a set of conventions
   for the automation of operations traditionally seen as barriers to
   the use and deployment of secure end-to-end interpersonal messaging.
   These include, but are not limited to, key management, key discovery,
   and private key handling.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat