IETF Logo Mail Archive

[openpgp] Re: Call for adoption: draft-dkg-openpgp-external-secrets-03 (Ends 2026-09-18)

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 04 September 2026 14:54 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: openpgp@mail2.ietf.org
Delivered-To: openpgp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CCB0213591456 for <openpgp@mail2.ietf.org>; Fri, 4 Sep 2026 07:54:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788533684; bh=2GsEbcohbA1YRYs1JYRrIlPdhrFV7gFVeOzYnESZQpc=; h=From:To:Subject:In-Reply-To:References:Date; b=Z/RM6JLTqjQaae9NOSh4ERdsuH1KMoS938k78FYAuinpVUcNx6GfobPvuoXoOslyd KMWW4ySMfkNDqXioSQOx2/pvNQUQoB8X0y8U1A2Ewo6xfl9C/QViVPbE7wD+MWrSVL iXsHR8L0peO4USKwafXcTtNv6EVs6zXWDbJO37wA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b="yvsX2nKV"; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b="rdANMFqq"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KEpScsJ1Ptjh for <openpgp@mail2.ietf.org>; Fri, 4 Sep 2026 07:54:44 -0700 (PDT)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 613DB1359144D for <openpgp@ietf.org>; Fri, 4 Sep 2026 07:54:44 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1788533684; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=2GsEbcohbA1YRYs1JYRrIlPdhrFV7gFVeOzYnESZQpc=; b=yvsX2nKVK4i6CiRMbSlnAq0vimR/gZzr7F9bGqBEX/Op0SIXJh1HjfmSc2S+V2/I1jm1/ rvXpEi5+Pv/1zU9Ag==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1788533684; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=2GsEbcohbA1YRYs1JYRrIlPdhrFV7gFVeOzYnESZQpc=; b=rdANMFqqfQ77N1+tj6Gm6/E70FcBoZIIjQFpM+Enu56z9TCQ+UulDdnKOqmj1BOurfjUl 8xUXROWK087z/YbhJ0ZXS6zqF3aLX6MWvQPN5q0JHA289N8TimQO5uXvaVXSB0Lf55ci1tk krA0GE4PFGufATJtQWRvXDI4STdzF6mspEiXLh1hj7QG8in88dP+FNh48GoqwcB60y251NA F4fqtptdTsK4tRVlrsN29QIOxdtMcM925/5HnfpUMo1inC3dX6u/NxXTbR4WQx3vxjAdX6o bL5KzLAo9EDoOxZo5Xg0Ke4mYKNVcs92GnMJ+S0QZwkNWjV1CyMHv1uocGTg==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 3930CF946 for <openpgp@ietf.org>; Fri, 04 Sep 2026 10:54:44 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id B69A013F6DD; Fri, 04 Sep 2026 10:54:41 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: openpgp@ietf.org
In-Reply-To: <178852887840.96242.13353437834122751025@dt-datatracker-9769b79f-xztnc>
References: <178852887840.96242.13353437834122751025@dt-datatracker-9769b79f-xztnc>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= xjMEZXEJyxYJKwYBBAHaRw8BAQdA5BpbW0bpl5qCng/RiqwhQINrplDMSS5JsO/YO+5Zi7HNFzxk a2dAZmlmdGhob3JzZW1hbi5uZXQ+wsARBBMWCgB5AwsJB0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcS78JIJ7JbALqPiKEmva7/Pp16WwXWm9hbe5+B/UvnfwMVCggCmwEC HgEWIQTUdwQMcMIValwphUm7fpEBSV5r9wUCZadfkAUJBdnwRQAKCRC7fpEBSV5r9yNXAP442N0c zvisBroQSKKpo+OWm2JpnEJWoVheeJvoRtkBGQEA+edHylby8IGcNccq7rmM2rAXdofvrU1o6qow V+mmDwbOMwRnio4OFgkrBgEEAdpHDwEBB0Cw9HzJFl9lZn3UBaUqSMSgxjcdbd0MwNVcGZ8t8wdN EcLAvwQYFgoBMQWCZ4qODgkQu36RAUlea/dHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9p YS1wZ3Aub3JnhcN+tn41cAg01Kk56zcAfpdsh8j98PDe00mqKPfFvaYCmwK+oAQZFgoAbwWCZ4qO DgkQeAuFTtnCtJZHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnxsD8Sk5P Wgx8c/Zseo6OlCjyDC+Ogm17gTaUUIpxjWYWIQRjrBGOWy5dZsiKhad4C4VO2cK0lgAAdcQA/1RG dmrmvVxkBY2qNPjtERNwPga8Pf4IdlenrZ03NXM4AQC+TDHMpD7d5obEvUy8GYI3oThzYItPP8vv ChY+wbaIBRYhBNR3BAxwwhVqXCmFSbt+kQFJXmv3AAAKbgD+K1MZXnRKPdmA8DgNysyGRZY8cSVH HQcC7ZAAtV3i2+wA/0CyOYrbFYbyTRALgoERR07OHFoP+fJopQLMNQARVUELzjgEZ4qN+RIKKwYB BAGXVQEFAQEHQDTGlR+Qmn334e+bPqvojJVdFsiBf0leAAHP+ESqop8NAwEIB8LAAAQYFgoAcgWC Z4qN+QkQu36RAUlea/dHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnA5Lw b3wOOcoodImuVNw4PYq1U65FDC1Q2JMFIcJXqF0CmwwWIQTUdwQMcMIValwphUm7fpEBSV5r9wAA 6egA/j3QANSmogZ5VTF5KlI+BBye9ud/w9j7RLcCHU6u8AA1AQC3FGaNuv+uWOSa+eeEoI/aZrGd X5el8b/m6aXDDxDjDg==
Date: Fri, 04 Sep 2026 10:54:41 -0400
Message-ID: <87se3pm5hq.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
Message-ID-Hash: SBTIRHPRUULKEVK2UGDQIN4TLXT3BOVX
X-Message-ID-Hash: SBTIRHPRUULKEVK2UGDQIN4TLXT3BOVX
X-MailFrom: dkg@fifthhorseman.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: Call for adoption: draft-dkg-openpgp-external-secrets-03 (Ends 2026-09-18)
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/bElwP3A39qh-tezIYW1_ZYoY-Fc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

On Fri 2026-09-04 06:34:38 -0700, Stephen Farrell via Datatracker wrote:
> Asd discussed at ITF-126, this message starts a openpgp WG Call for Adoption of:
> draft-dkg-openpgp-external-secrets-03
>
> This Working Group Call for Adoption ends on 2026-09-18
>
> Abstract:
>    This document defines a standard wire format for indicating that the
>    secret component of an OpenPGP asymmetric key is stored externally,
>    for example on a hardware device or other comparable subsystem.

I don't think hardware devices are a sensible tradeoff for almost every
user of OpenPGP.  But i recognize that some people really want them, and
i'd like a simple, standard way to represent that practice.  That's the
reason i contributed to this draft in my individual capacity in the
first place.

So, I support WG adoption.

As WG co-chair, and as a non-advocate for hardware keys, i don't think i
belong as editor on the piece if it is adopted.  I've checked with
Heiko, and he's fine continuing as editor without me, should the draft
be adopted by the WG.  I do intend to continue to review and comment on
the draft going forward.

If anyone wants to co-edit this draft with Heiko, if the draft is
adopted, please coordinate with him.

Regards,

        --dkg

v2.46.0 | Report a Bug | By Email | System Status