IETF Logo Mail Archive

[openpgp] Re: Splitting replacement keys subpacket into related keys and trust equivalence?

"Neal H. Walfield" <neal@walfield.org> Fri, 13 September 2024 14:13 UTC

Return-Path: <neal@walfield.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96966C151533; Fri, 13 Sep 2024 07:13:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.91
X-Spam-Level:
X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8yjKAyDiI3wN; Fri, 13 Sep 2024 07:13:06 -0700 (PDT)
Received: from mail.dasr.de (mail.dasr.de [202.61.250.5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7304C14F6E2; Fri, 13 Sep 2024 07:13:01 -0700 (PDT)
Received: from pd9e791dc.dip0.t-ipconnect.de ([217.231.145.220] helo=forster.huenfield.org) by mail.dasr.de with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <neal@walfield.org>) id 1sp72i-006yRe-0U; Fri, 13 Sep 2024 16:12:59 +0200
Received: from [192.168.20.191] (helo=alice.walfield.org) by forster.huenfield.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <neal@walfield.org>) id 1sp72g-00CYP6-QC; Fri, 13 Sep 2024 16:12:58 +0200
Date: Fri, 13 Sep 2024 16:12:58 +0200
Message-ID: <87ttejmyl1.wl-neal@walfield.org>
From: "Neal H. Walfield" <neal@walfield.org>
To: Bart Butler <bart=2Bietf=40pm.me@dmarc.ietf.org>
In-Reply-To: <QWe_vInjuymtnGi-gB9CBQJ8FhRKDuld5RcJgmiMOp7oniQS-oBwW4L_zZwhlZ-J3t-SW3AQsU2mrAhfvOcHCBPxJ_wvqklitTbESNpFENw=@pm.me>
References: <I1AVKcpZIk0c47n7JbfpMHn0RmQv7YTkXvRC7JbH_MRPfKvd4V6jn50E0pIcaANbAZ4-khxFgIGLk5D1rDsJgPTQgvNoqbPzbj5WEd5rUc0=@protonmail.com> <5ED82E08-5973-4C4D-8726-49B24646DF2D@andrewg.com> <8dasmNRbHHCaM5m_appBMcCDLKuk4fT1CMnWZMmzAK77m_C4lRKIR1dlYqBzL9zW5CdFXUfv5LPuU46w5uMEGMtnN-cCxJaeGRzks0gQYC0=@pm.me> <0aa16b8d-e217-481a-b039-c64f3b92937f@posteo.de> <ePUGJvmji5T0hgZwyaCC6nYVhgPdTgd0wl_vaLWZFlkYUW_T5B13fTUevlWsxYEGeoSFtNvrkUjiENZSUG1BBhcijebhkI9hIWIZ4DX0zk0=@protonmail.com> <9D5F628D-513A-4B67-AF3C-FD34A8F74391@andrewg.com> <QWe_vInjuymtnGi-gB9CBQJ8FhRKDuld5RcJgmiMOp7oniQS-oBwW4L_zZwhlZ-J3t-SW3AQsU2mrAhfvOcHCBPxJ_wvqklitTbESNpFENw=@pm.me>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM-LB/1.14.9 (Gojō) APEL-LB/10.8 EasyPG/1.0.0 Emacs/28.2 (x86_64-pc-linux-gnu) MULE/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
X-SA-Exim-Connect-IP: 192.168.20.191
X-SA-Exim-Mail-From: neal@walfield.org
X-SA-Exim-Scanned: No (on forster.huenfield.org); SAEximRunCond expanded to false
Message-ID-Hash: 6AJCTJZ3U5CGL3AF7JRPVYH5IKKGRZ5T
X-Message-ID-Hash: 6AJCTJZ3U5CGL3AF7JRPVYH5IKKGRZ5T
X-MailFrom: neal@walfield.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "openpgp\\@ietf.org" <openpgp@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [openpgp] Re: Splitting replacement keys subpacket into related keys and trust equivalence?
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/xTXQCmgoHK3PaXJbuuVY6AqjOc8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

On Fri, 13 Sep 2024 16:06:55 +0200,
Bart Butler wrote:
> Not to expand the scope even more, what about an optional HTTP URI field instead to fetch the key? Thus
> could presumably handle both WKD and HKP backends, as well as simple web hosting of a file. Imprint
> used to verify content.

I'm not excited about URLs.  They can be used for tracking, and they
tend to bit rot.  Embedding a fingerprint means that a client can use
an ad-hoc, decentralized network like their preferred key server.

Neal

v2.46.0 | Report a Bug | By Email | System Status