IETF Logo Mail Archive

Re: [openpgp] respecting key flags for decryption

Peter Gutmann <pgut001@cs.auckland.ac.nz> Sat, 10 November 2018 03:12 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91083130DD5 for <openpgp@ietfa.amsl.com>; Fri, 9 Nov 2018 19:12:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auckland.ac.nz
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sO-TAt0rT9B for <openpgp@ietfa.amsl.com>; Fri, 9 Nov 2018 19:12:16 -0800 (PST)
Received: from mx4-int.auckland.ac.nz (mx4-int.auckland.ac.nz [130.216.125.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBCA012D4EB for <openpgp@ietf.org>; Fri, 9 Nov 2018 19:12:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1541819536; x=1573355536; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=OXASOKYmS3/sz56aEjAujf+G1PS/R7XnEZs+qfr9vEg=; b=rt9objjr5CVaBaX3Hoxkb2LN1ZLMmpGMXp9unmkrZlOUg9RM1qLLMU0q C8Q5cmqw9ksMBCAfdOcwO3xTtXVoY+9AzdhwVqFGtk/PzlF5fYj0859jb d93eoc9Dwy9PGQf/7iYhc7z2GaSCRtIraOzBpbrahHCHaoFePsoqpF3/t jdbQZ14KqjZ7XACiZHhGvp3drGWt6n0RN1ujORXJhqWEjGu7jEzzANVuU CSTZjRssh1q0MsHDEtG9c/VhHRG6CFmdCd5oJH4iYPuxkvnCTDXs4YwXB cTEQkYceL68x0KRM4nhchFSpi/gscF//LSkMjiYjcWdjwlgD8v90qUUpQ w==;
X-IronPort-AV: E=Sophos;i="5.54,485,1534766400"; d="scan'208";a="38990068"
X-Ironport-HAT: MAIL-SERVERS - $RELAYED
X-Ironport-Source: 10.6.3.5 - Outgoing - Outgoing
Received: from exchangemx.uoa.auckland.ac.nz (HELO uxcn13-tdc-d.UoA.auckland.ac.nz) ([10.6.3.5]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES256-SHA; 10 Nov 2018 16:12:11 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) by uxcn13-tdc-d.UoA.auckland.ac.nz (10.6.3.5) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sat, 10 Nov 2018 16:12:11 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.5]) by uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.5]) with mapi id 15.00.1395.000; Sat, 10 Nov 2018 16:12:11 +1300
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Werner Koch <wk@gnupg.org>
CC: Vincent Breitmoser <look@my.amazin.horse>, Jon Callas <joncallas@icloud.com>, "openpgp@ietf.org" <openpgp@ietf.org>
Thread-Topic: [openpgp] respecting key flags for decryption
Thread-Index: AQHUeAMtvTjqM1Dj2EWug5wDrVC4uKVIVgI3
Date: Sat, 10 Nov 2018 03:12:10 +0000
Message-ID: <1541819520454.36449@cs.auckland.ac.nz>
References: <75BF6022-6C87-45A7-9FE9-678EA022C39A@icloud.com> <F6G9P4PUTM.2GANNJVZZYB8G@my.amazin.horse> <F6H5ZXC03G.2SFRGQ14E5LZK@my.amazin.horse> <1541716302530.66616@cs.auckland.ac.nz>, <87va56wu75.fsf@wheatstone.g10code.de>
In-Reply-To: <87va56wu75.fsf@wheatstone.g10code.de>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [130.216.158.4]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/K7kQsmyz1iY1QeJevHR-1NcaNrU>
Subject: Re: [openpgp] respecting key flags for decryption
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Nov 2018 03:12:19 -0000

Werner Koch <wk@gnupg.org> writes:

>> Maybe all of these unofficial reference implementations need a strict-
>> checking mode for when they're being (incorrectly) used as reference
>> implementations
>
> gpg --compliance=openpgp ....
>
>is intended to do just that.

In hindsight my phrasing of the problem wasn't the best, it needs both a
compliance-checking mode and someone who enforces it.  At the moment the
compliance check is "the message is accepted by GPG/Putty/OpenSSH in it's
default/most-tolerant configuration", in the sense of "XYZ accepts our
message, therefore it's not our fault if your one doesn't".  So you'd need
either some certification body that says "yes, your implementation really is
compliant", or for the standard implementation to warn that the other side is
non-compliant when a message is received from it in order to force it to be
fixed - think Vista's UAC warnings that were created in order to deal with the
everyone-is-admin-all-the-time assumption of many/most Windows apps at the
time.

Unfortunately I don't think either of those will be terribly palatable...

Peter.

v2.23.0 | Report a Bug | By Email