Re: [openpgp] key distribution by email strategy

[Heiko Schaefer <[e-mail]>]

Hello Kai

On 12/11/20 12:21 PM, Kai Engert wrote:
[..]
> (3) Develop a reasonable strategy for treating complex keys,
> which contain multiple user IDs, or multiple sub keys, or both.
[..]

I would like to add a strong vote for not casually inventing yet another
mechanism for distributing OpenPGP key material.

The autocrypt standard is established, and quiet a few projects support
it (https://autocrypt.org/dev-status.html).

One of the stated objectives of autocrypt is "Use decentralized, in-band
key discovery" (https://autocrypt.org/background.html). This seems to be
exactly what this discussion is about.

For example, the point you raise above is specifically covered in the
standard here: https://autocrypt.org/level1.html#openpgp-based-key-data


If the autocrypt standard does not satisfy requirements that thunderbird
has, relating to key discovery, it would seem best to me that the wider
OpenPGP community work on enhancing the standard.

Thank you, regards,
Heiko