[openpgp] Re: Call for adoption: draft-dkg-openpgp-external-secrets-03 (Ends 2026-09-18)

[Heiko Schäfer <[e-mail]>]

Hello all, dkg,

first, thank you dkg for your work on external-secrets (and for 
entrusting the text to my editorship).

Of course, hardware-backed keys are a trade-off, and not ideal in all 
situations. Still, they are effectively necessary in some contexts.
For example, Let's Encrypt use hardware backed key material. As they 
should, and really must.

Thus I think it's useful to standardize use of hardware backed keys in 
OpenPGP.
I support adoption of this draft, which specifies such a standardized 
mechanism.

And I'm happy to report that Paul Schaub has agreed to co-edit the draft 
with me.

Thanks,
Heiko


On 9/4/26 3:34 PM, Stephen Farrell via Datatracker wrote:
> Asd discussed at ITF-126, this message starts a openpgp WG Call for Adoption of:
> draft-dkg-openpgp-external-secrets-03
>
> This Working Group Call for Adoption ends on 2026-09-18
>
> Abstract:
>     This document defines a standard wire format for indicating that the
>     secret component of an OpenPGP asymmetric key is stored externally,
>     for example on a hardware device or other comparable subsystem.
>
> Please reply to this message and indicate whether or not you support adoption
> of this Internet-Draft by the openpgp WG. Comments to explain your preference
> are greatly appreciated. Please reply to all recipients of this message and
> include this message in your response.
>
> Authors, and WG participants in general, are reminded of the Intellectual
> Property Rights (IPR) disclosure obligations described in BCP 79 [2].
> Appropriate IPR disclosures required for full conformance with the provisions
> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
> Sanctions available for application to violators of IETF IPR Policy can be
> found at [3].
>
> Thank you.
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-dkg-openpgp-external-secrets/
>
> There is also an HTMLized version available at:
> https://datatracker.ietf.org/doc/html/draft-dkg-openpgp-external-secrets-03
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-dkg-openpgp-external-secrets-03
>
> _______________________________________________
> openpgp mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]