Re: [openpgp] The DANE draft

Aaron Zauner <azet@azet.org> Fri, 24 July 2015 14:25 UTC

Return-Path: <azet@azet.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DBF01A896E for <openpgp@ietfa.amsl.com>; Fri, 24 Jul 2015 07:25:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YD76hCwsQYWk for <openpgp@ietfa.amsl.com>; Fri, 24 Jul 2015 07:25:01 -0700 (PDT)
Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A16101A92F4 for <openpgp@ietf.org>; Fri, 24 Jul 2015 07:24:55 -0700 (PDT)
Received: by wibud3 with SMTP id ud3so30274776wib.0 for <openpgp@ietf.org>; Fri, 24 Jul 2015 07:24:54 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type; bh=KrSAuT8JvVS4CKUBEReLVw0gZ6MXHcR7p7kUY5b/wMQ=; b=k7W5hJXanfYHU7bAzzZPohUs9MaUNPOzY4sHhIIEcSZG/zNHOmR1POgDL7PgIgDP+W ClX+1Y9l7iJ3D7XzvHfrKklYdOUa4+CoIUglOg6n3+nCZxBRMM3SPqf3gT46JlkH89M9 VYdrK9LREBd8RF5BU1YiegMGs5gqA+zjiFpeZ/HgeDrR8BYooyeJdyoeU6QV6gtwbbKa Bmv/ueY0xUxNu4dhlwHJwsrAGwzGvR62aoOk+ZFOeKb+fuvyWH7CX0vaRtzpcdb1mFRD kGxAl3IvCDxrPuaPfysaSQZUd2kwKBAWV8RqPciIfs+fA+zVYuxH3sxz9PVWzbZmsqE6 9wPA==
X-Gm-Message-State: ALoCoQkEX0RSxvpZgQVlTy6cxZ4mxLuXEoC/WF8gaoqA0cFz3C3BJQ8Y9DnMVFdEjTkQtbXYjGcN
X-Received: by 10.194.58.7 with SMTP id m7mr26474364wjq.109.1437747894385; Fri, 24 Jul 2015 07:24:54 -0700 (PDT)
Received: from [10.22.29.93] ([194.112.182.218]) by smtp.gmail.com with ESMTPSA id ib9sm12932231wjb.2.2015.07.24.07.24.51 for <openpgp@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 24 Jul 2015 07:24:53 -0700 (PDT)
Message-ID: <55B24AAB.7000601@azet.org>
Date: Fri, 24 Jul 2015 16:24:43 +0200
From: Aaron Zauner <azet@azet.org>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: IETF OpenPGP <openpgp@ietf.org>
References: <CAMm+LwhYdBLXM8Td8q8SCnzgwywRgMx3wNKeS_Q0JSN4Lh7rZQ@mail.gmail.com> <55B231EB.6000703@cs.tcd.ie>
In-Reply-To: <55B231EB.6000703@cs.tcd.ie>
X-Enigmail-Version: 1.2.3
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="------------enigE87FAD3F74FF879A697F0202"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/4DPGfGW0TTVC6Y8gWIcUwksVNDM>
Subject: Re: [openpgp] The DANE draft
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jul 2015 14:25:02 -0000

Hey,

Just wanted to point out that UTA has recieved a draft that's very
interesting (and IMHO more valuable than anything that relies on DNSSEC)
- it defines an extension to SMTP and SUBMISSION for querying e-mail
address related information (e.g. PGP keys), and may be used to
authenticate afterwards:

https://tools.ietf.org/html/draft-moore-email-addrquery-01

I've read the document (though only skimmed a few sections) and it looks
very promising if you ask me. I couldn't come up with any attack and it
seems to be implementable rather painlessly.

Aaron