Re: [openpgp] key distribution by email strategy

Heiko Schaefer <> Fri, 11 December 2020 12:22 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 69BC73A0B0C for <>; Fri, 11 Dec 2020 04:22:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.12
X-Spam-Status: No, score=-2.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id XZRD7CeUNy8M for <>; Fri, 11 Dec 2020 04:22:21 -0800 (PST)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 8CA9E3A0AF8 for <>; Fri, 11 Dec 2020 04:22:20 -0800 (PST)
Received: from submission ( []) by (Postfix) with ESMTPS id 416FC2400FC for <>; Fri, 11 Dec 2020 13:22:14 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;; s=2017; t=1607689337; bh=MJHC869qVW0N5wPY+Ode0+6Qu66njrRwwzCejrD5kjY=; h=To:From:Subject:Date:From; b=QwOmTEH8WWHnpXVHHo6wejcIiRFbsStbD8EQ0CVKjA0QBs+PmoBqVHapU85bFByOZ P4Ucc8nYlwAg3pSNbMJH92G3vcP2a/RYyx8USxba6dN58YRpfgdW5S7+M0337ZAwLj yXpMj3d1dmla2jDNC/xIf+J03ksEpYOda60O2KNP3H3JCVSdWbiYkajJuOQrTyIeV4 LTIhhFp8C6jfimul/sOVqqvdBabHDBlzTXseLrpl7Wxeyu1TiP21RCQtyhspIrBghv bdTqlOScF+6Z9XG9ASXxGRtDwKbVZSLc3gxPK1131Y1FmpMikRCqcd5y5bFpozxoTV X/x4x5IDOMcDQ==
Received: from customer (localhost []) by submission ( with ESMTPSA id 4CsqfZ3mSvz6tmD for <>; Fri, 11 Dec 2020 13:22:13 +0100 (CET)
References: <> <>
From: Heiko Schaefer <>
Message-ID: <>
Date: Fri, 11 Dec 2020 13:22:12 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.5.1
MIME-Version: 1.0
In-Reply-To: <>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <>
Subject: Re: [openpgp] key distribution by email strategy
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Fri, 11 Dec 2020 12:22:23 -0000

Hello Kai

On 12/11/20 12:21 PM, Kai Engert wrote:
> (3) Develop a reasonable strategy for treating complex keys,
> which contain multiple user IDs, or multiple sub keys, or both.

I would like to add a strong vote for not casually inventing yet another
mechanism for distributing OpenPGP key material.

The autocrypt standard is established, and quiet a few projects support
it (

One of the stated objectives of autocrypt is "Use decentralized, in-band
key discovery" ( This seems to be
exactly what this discussion is about.

For example, the point you raise above is specifically covered in the
standard here:

If the autocrypt standard does not satisfy requirements that thunderbird
has, relating to key discovery, it would seem best to me that the wider
OpenPGP community work on enhancing the standard.

Thank you, regards,