Re: [openpgp] AS2+OpenPGP protocol extension review request

Ben McGinnes <ben@adversary.org> Thu, 14 February 2019 06:23 UTC

Return-Path: <ben@adversary.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35295130FEC for <openpgp@ietfa.amsl.com>; Wed, 13 Feb 2019 22:23:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.918
X-Spam-Level:
X-Spam-Status: No, score=-0.918 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_DYNAMIC=0.982, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZBBZYwtX_2og for <openpgp@ietfa.amsl.com>; Wed, 13 Feb 2019 22:23:07 -0800 (PST)
Received: from devious.adversary.org (ec2-52-29-175-128.eu-central-1.compute.amazonaws.com [52.29.175.128]) by ietfa.amsl.com (Postfix) with ESMTP id 909EC130FDC for <openpgp@ietf.org>; Wed, 13 Feb 2019 22:23:07 -0800 (PST)
Received: from adversary.org (localhost [127.0.0.1]) by devious.adversary.org (Postfix) with ESMTP id BAA7448344; Thu, 14 Feb 2019 06:23:04 +0000 (UTC)
Date: Thu, 14 Feb 2019 17:23:03 +1100
From: Ben McGinnes <ben@adversary.org>
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>
Cc: "cryptography@metzdowd.com" <cryptography@metzdowd.com>, "openpgp@ietf.org" <openpgp@ietf.org>
Message-ID: <20190214062303.jlokrdgqduptteyp@adversary.org>
References: <20190212040914.23kkncp2fptccwp6@adversary.org> <1549954014509.38591@cs.auckland.ac.nz>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="rovkpdqyp63irf2w"
Content-Disposition: inline
In-Reply-To: <1549954014509.38591@cs.auckland.ac.nz>
OpenPGP: "id=DB4724E6FA4286C92B4E55C4321E4E2373590E5D; url=http://www.adversary.org/ben-key.asc; preference=signencrypt"
Codes-of-Conduct-policy: "url=https://gitlab.com/Hasimir/project-participation-policy"
User-Agent: NeoMutt/20180716
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/bzLx2mDb2Na1NNNI9RJiB5VBZvc>
Subject: Re: [openpgp] AS2+OpenPGP protocol extension review request
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Feb 2019 06:23:09 -0000

On Tue, Feb 12, 2019 at 06:46:57AM +0000, Peter Gutmann wrote:
> Ben McGinnes <ben@adversary.org> writes:
> 
> >Essentially it's a design for extending the W3C's ActivityStream
> >version 2.0 (AS2) and ActivityPub (AP) protocols for federated
> >social networks (e.g.  Mastodon and Pleroma) with OpenPGP in order
> >to provide a host of features not inherently built into AS2 and AP.
> 
> Just a note on this, I don't know what the W3C's AS2 is but whatever
> it is it's nothing like the real AS2, which is a secure EDI standard
> that's been around for close to twenty years (there are actually
> several AS standards, but the most widely-used one is AS2).  So if
> anyone goes looking for AS2 security information, they're going to
> get a very different AS2...

Ah, oops; well there's a good reason to drop initialisms and acronyms
from draft #3.

The W3C's thing is a protocol for social networking and micro-blogging
which is implemented largely in JSON format.  It grew out of the GNU
StatusNet thing, except it's clearly defined (StatusNet was a bit
hodge-podge).  Since it's federated, it's beginning to pick up a fair
bit of traction amongst the growing number of social network users who
have become disatisfied with the likes of Twitter and FarceBook.

Well, I'm not overly fussed about needing to use a short term for
these things beyond just for my own quick references during drafting;
so I'm quite happy to drop it in order to avoid future confusion.


Regards,
Ben