Re: [openpgp] How to re-launch the OpenPGP WG

[Werner Koch <[e-mail]>]

On Fri, 13 Mar 2015 04:52, [e-mail] said:

> 1) More general things
> - The WG should consider whether to just bring OpenPGP up to date... or
>   whether to completely overhaul or even re-design it.

The please give the thing another name.  Recall the outcry whn I removed
PGP-2 support from 2.1.

> - The basic meshed web of trust must obviously be retained, but apart

OpenPGP does not define the Web of Trust.  There is no standard for it.

>   - Since the X.509 PKI infrastructure in the internet is inherently
>     broken and since DANE would only partially improve things (one still
>     has several CA's above which could be evil), the time may come in
>     which at least some security conscious people would want to use TLS
>     or similar with a fully meshable PKI as OpenPGP.
>     For that we might need similar things as X.509 got eventually,...
>     things like SubjectAlternativeNames for IP, DNS, email, etc.

We already have this.  You may either use a plain user ID with signed
attributes to implement this or, better, extend the attribute packet,
which is currently only used for photo ids, but designed for what you
want.  You may already start with this using the 100--110 subpacket
types.

Regarding the rest of your mail, I think it is better to postpone a
detailed discussion for now.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.