IETF Logo Mail Archive

Re: [openpgp] [FORGED] RE: Fingerprint schemes versus what to fingerprint

"Mark D. Baushke" <mdb@juniper.net> Mon, 11 April 2016 23:28 UTC

Return-Path: <mdb@juniper.net>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 791DB12F64D for <openpgp@ietfa.amsl.com>; Mon, 11 Apr 2016 16:28:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwVzPiL-hVfv for <openpgp@ietfa.amsl.com>; Mon, 11 Apr 2016 16:28:42 -0700 (PDT)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0783.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:783]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79A5612F64C for <openpgp@ietf.org>; Mon, 11 Apr 2016 16:28:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oMX8K+oiPt0xDRhqCgbMcPFPmb0QLk9PtvhDrpPrMlg=; b=bu60nnQhDYW65RHlE2Y3KtH9SuQqdgwnjOa9iRafCKplfhA0KVOL7Aif1EVQehKz5ae3QfGhHsqxpqjM6PA1S6PWICKC7E9DxUU/vO/fXPpWEfGDH9rVubLUT7LtP3ubPYrbRIaI/KVLj24IGDsTqEZHIT2mPCQf9zONw6/Vff4=
Received: from SN1PR0501CA0017.namprd05.prod.outlook.com (10.163.126.155) by BLUPR0501MB802.namprd05.prod.outlook.com (10.141.251.140) with Microsoft SMTP Server (TLS) id 15.1.453.26; Mon, 11 Apr 2016 23:28:21 +0000
Received: from BY2FFO11OLC004.protection.gbl (2a01:111:f400:7c0c::162) by SN1PR0501CA0017.outlook.office365.com (2a01:111:e400:52fe::27) with Microsoft SMTP Server (TLS) id 15.1.453.26 via Frontend Transport; Mon, 11 Apr 2016 23:28:20 +0000
Authentication-Results: spf=softfail (sender IP is 66.129.239.19) smtp.mailfrom=juniper.net; gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=juniper.net;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.19 as permitted sender)
Received: from p-emfe01b-sac.jnpr.net (66.129.239.19) by BY2FFO11OLC004.mail.protection.outlook.com (10.1.15.184) with Microsoft SMTP Server (TLS) id 15.1.453.6 via Frontend Transport; Mon, 11 Apr 2016 23:28:20 +0000
Received: from magenta.juniper.net (172.17.27.123) by p-emfe01b-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 11 Apr 2016 16:28:20 -0700
Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id u3BNSJA48359; Mon, 11 Apr 2016 16:28:19 -0700 (PDT) (envelope-from mdb@juniper.net)
Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id 89D3911542; Mon, 11 Apr 2016 16:28:18 -0700 (PDT)
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>
In-Reply-To: <9A043F3CF02CD34C8E74AC1594475C73F4C57DA7@uxcn10-5.UoA.auckland.ac.nz>
References: <43986BDA-010F-4DBF-8989-53E71B74E66A@gmail.com> <20151110021943.GH3896@vauxhall.crustytoothpaste.net> <72665D15-F685-41F6-A477-8E65DBBC5A04@gmail.com> <9A043F3CF02CD34C8E74AC1594475C73F4C42AC4@uxcn10-5.UoA.auckland.ac.nz>, <sjm1t6c40uy.fsf@securerf.ihtfp.org> <9A043F3CF02CD34C8E74AC1594475C73F4C56BF1@uxcn10-5.UoA.auckland.ac.nz>, <9652a57c1e22f4ac3d417aebca44851c.squirrel@mail2.ihtfp.org> <9A043F3CF02CD34C8E74AC1594475C73F4C57DA7@uxcn10-5.UoA.auckland.ac.nz>
Comments: In-reply-to: Peter Gutmann <pgut001@cs.auckland.ac.nz> message dated "Mon, 11 Apr 2016 19:21:49 -0000."
From: "Mark D. Baushke" <mdb@juniper.net>
Date: Mon, 11 Apr 2016 16:28:18 -0700
Message-ID: <87608.1460417298@eng-mail01.juniper.net>
Sender: mdb@juniper.net
MIME-Version: 1.0
Content-Type: text/plain
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report: CIP:66.129.239.19; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(189002)(199003)(87936001)(117636001)(5003940100001)(586003)(86362001)(47776003)(76506005)(106466001)(53416004)(105596002)(54356999)(11100500001)(76176999)(50986999)(93886004)(110136002)(15975445007)(189998001)(5003600100002)(2906002)(77096005)(50466002)(81166005)(6806005)(2810700001)(48376002)(2950100001)(19580395003)(19580405001)(4326007)(92566002)(1096002)(1220700001)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR0501MB802; H:p-emfe01b-sac.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; MX:1; A:1; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BY2FFO11OLC004; 1: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
X-MS-Office365-Filtering-Correlation-Id: 793ded0b-af7d-4f3e-6415-08d36260f840
X-Microsoft-Exchange-Diagnostics: 1; BLUPR0501MB802; 2:yJ4zi1hF13By/d+CELe3cbZsKUmHlktJb1C7LMxUmtyEMWvDhKIsMcsaax2Kqjlf5GJpMaBOfjJ+4QA1Q+4mTXrTpuzNZLrQ/38mQVCjrZNdxh50QwabQYocXhte2NzZv6Vh8gW0+xf9i0UJlwoZwxDEHn7fMAEIBp/LTkbNNRS2tREgx1KX6rbULkXFRz58; 3:TQXCUVwwgrXswX3AefsYhdm+Li1l+RleafmHGNQdQopaYN8RX/+0vAHxtsRzckUallFJRVd9cbh1nqljBivuZwYMz9lHUcfKxtWjJheKLAof3eeey2dq/dMa1zC3z1GUlnV1ixq7doTumTg3IaTg7KNRfuzVMS6mjxB54Z6AgkIA9rcW5hBA71QS8f5oW7tLhWoSeOPr4dB6kCr8MaK2NeF10UNpgnrAGnqIu6OJ6jQ=; 25:gg94FlqinD+sNXTOH9rXMFp2cOeoZI1kEcOGJw5eNNOzauzoCuVEcAgt9ZLZRlQ7qBshOR3skGFXsKwfCBtCtcNiOOMZYPvTj3qn/Onj/VhQJtRWljrk6dU6GJMNv7ziLtee65XBwmX18I/fIkUq/LJoURKzTWPgyOlzNodVg63ldQLY8usEdWLvWx74t+fmaT7hUVvvCPVCIFCsVPcOvUTxc8hOR5+mOfEn54BmyDrEVZdqAu7Hfdoyn878LXxAKUYuM/dqHKAujKkcc0tALRf/tPU5A3o4mdycpn7Jp+FOvGr8NugpZErzylMVEn6YvjT4tW9++lb12/L+h346Ug==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR0501MB802;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR0501MB802; 20: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
X-Microsoft-Antispam-PRVS: <BLUPR0501MB802D24701F0ABF618E38D76BF940@BLUPR0501MB802.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(13024025)(13023025)(8121501046)(13015025)(13017025)(13018025)(10201501046)(3002001)(6055026); SRVR:BLUPR0501MB802; BCL:0; PCL:0; RULEID:; SRVR:BLUPR0501MB802;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR0501MB802; 4:poF2cgzb4PYIIZg4HIUbtMui6o3/PAVKTYJuEegvL7EtCvFnkjo055RdCxVOKnk/tf1QOTnCx12+IRo3BpJVdwcgQE+D8lg/LraMhQRkqU51iuxtd1oP8/5nKigbfQus3OdTPdUQpQZg51oQhdNFIlR1ALeGs14g8M9PaSrve0uJT+xRVJ4RLVxHFfJjaCUtnJZZHs/jVXKXJtyrY+XTYUEyCA5nBFnn78NwAU9qCj6KZbvw8dk5/tTHbJTxMpqEUERUU5FRfVsJZrmNrK04sPglI/GDd6BUUiMoav5Nm3JPOaKC8yTUddtfMCOEQUdFPG1FQGaSnapl3hKsnJtcldAmhDhxhi8DOxUO/oKGHmaOlXWzqRqXjT9iQakq2kV1g38eVvoddaOyCCusvOZuPntaAnm7iHC3s2EgdviRq5wwwOwOKff0hjHRQMrowWBvQ7IFe9pSyeIep8b417wVuHym9lMTsSHj8lKcKq61uZM=
X-Forefront-PRVS: 09090B6B69
X-Microsoft-Exchange-Diagnostics: 1; BLUPR0501MB802; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BLUPR0501MB802; 5:eX99epI5DBsTAxwAvd/3KP4UduG17mv9NL1UiKdjeefvrwVOG0bGu2eyoKAcl9eVhe814MY5+IIKwUcSLNW1nbbqHA6v5wEKUDwtDqsrcUD8UjTMdIs/4386Ij4ns3kpD6Cw3JN9SRxsz7If+lY3Lg==; 24:J1clJDDTNgslykhuVcX0Fvv98MILhkfY8GZrI34ueX2JEEtFaGfnZAWK811asbs6CVK5XBs9Xwc2aJXAMX0ETVg6bH3q6QaZsPMa8KHNrvY=
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Apr 2016 23:28:20.8539 (UTC)
X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.19]; Helo=[p-emfe01b-sac.jnpr.net]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR0501MB802
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/0T4rHifKGbWLOBeVrk-Pd4Vd2Vs>
Cc: "openpgp@ietf.org" <openpgp@ietf.org>, Derek Atkins <derek@ihtfp.com>, Bryan Ford <brynosaurus@gmail.com>
Subject: Re: [openpgp] [FORGED] RE: Fingerprint schemes versus what to fingerprint
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Apr 2016 23:28:44 -0000

Peter Gutmann <pgut001@cs.auckland.ac.nz> writes:

> Derek Atkins <derek@ihtfp.com> writes:
> 
> I'm not sure what OpenPGP cards have to do with this, since I'm
> talking about PKCS #11. I can use a PKCS #11 device with X.509, with
> S/MIME, with TLS, with SSH, with IKE, and quite probably with a number
> of other, lesser-known Internet security protocols. The one
> significant one I can't use it with is PGP.

I have not had any problems using PKCS#11 with GnuPG.
See http://gnupg-pkcs11.sourceforge.net/

Most recently, I have used it with YubiKey NEO and YubiKey4.
See https://www.yubico.com/products/yubikey-hardware/yubikey4/

	-- Mark

v2.46.0 | Report a Bug | By Email | System Status