Re: [openpgp] Fingerprints

Werner Koch <wk@gnupg.org> Mon, 27 April 2015 16:26 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAECE1A898C for <openpgp@ietfa.amsl.com>; Mon, 27 Apr 2015 09:26:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.9
X-Spam-Level:
X-Spam-Status: No, score=-8.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_LETTER=-2, RCVD_IN_DNSWL_HI=-5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H6VXliUQkFIy for <openpgp@ietfa.amsl.com>; Mon, 27 Apr 2015 09:26:44 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 977301A8973 for <openpgp@ietf.org>; Mon, 27 Apr 2015 09:26:44 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.80 #2 (Debian)) id 1Ymlrn-0001sY-4c for <openpgp@ietf.org>; Mon, 27 Apr 2015 18:26:43 +0200
Received: from wk by vigenere.g10code.de with local (Exim 4.84 #3 (Debian)) id 1YmloT-0004Il-AU; Mon, 27 Apr 2015 18:23:17 +0200
From: Werner Koch <wk@gnupg.org>
To: Daniel Ranft <Daniel.Ranft@giepa.de>
References: <CAMm+LwhbB+-MnGRBCvprgAGOuu+5CJ2rgod7EBGOQR5UNVrspQ@mail.gmail.com> <87d232lkb6.fsf@alice.fifthhorseman.net> <87618qzlw0.fsf@vigenere.g10code.de> <1429922578.4659.49.camel@scientia.net> <1DC3C8C67280FB4C9A402CB6DB1358F519E90A4A32@S2008SBS.intern.giepa.de>
Organisation: g10 Code GmbH
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: id=F2AD85AC1E42B367; url=finger:wk@g10code.com
Mail-Followup-To: Daniel Ranft <Daniel.Ranft@giepa.de>, Christoph Anton Mitterer <calestyo@scientia.net>, "openpgp\@ietf.org" <openpgp@ietf.org>
Date: Mon, 27 Apr 2015 18:23:17 +0200
In-Reply-To: <1DC3C8C67280FB4C9A402CB6DB1358F519E90A4A32@S2008SBS.intern.giepa.de> (Daniel Ranft's message of "Mon, 27 Apr 2015 18:03:23 +0200")
Message-ID: <87pp6pczgq.fsf@vigenere.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/jvRj0PidIgc-4ePXEnafUZdD8cg>
Cc: Christoph Anton Mitterer <calestyo@scientia.net>, "openpgp@ietf.org" <openpgp@ietf.org>
Subject: Re: [openpgp] Fingerprints
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Apr 2015 16:26:45 -0000

On Mon, 27 Apr 2015 18:03, Daniel.Ranft@giepa.de said:

> You could use a QR code for at least the business cards? We discussed something like that on the OpenPGP summit a couple of days ago.

During one session it was remarked that one of the larger participating
projects got research results on QR codes indicating that QR codes don't
work reliable for mass deployment.  Thus for backing up and syncing
private keys they use a letters and digits based code to seed a PRNG.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.