From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Robert Pluim Newsgroups: gmane.emacs.devel Subject: Re: Autocrypt header field Date: Wed, 21 Feb 2018 11:19:54 +0100 Message-ID: <87y3jmfxv9.fsf@gmail.com> References: <874lmbubud.fsf@gmail.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1519208490 20940 195.159.176.226 (21 Feb 2018 10:21:30 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 21 Feb 2018 10:21:30 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.91 (gnu/linux) Cc: emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Feb 21 11:21:26 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eoRWe-00050B-Nb for ged-emacs-devel@m.gmane.org; Wed, 21 Feb 2018 11:21:24 +0100 Original-Received: from localhost ([::1]:59906 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eoRYg-0007u4-Vh for ged-emacs-devel@m.gmane.org; Wed, 21 Feb 2018 05:23:31 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:54082) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eoRVJ-0005f3-JW for emacs-devel@gnu.org; Wed, 21 Feb 2018 05:20:02 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eoRVG-00027C-Dp for emacs-devel@gnu.org; Wed, 21 Feb 2018 05:20:01 -0500 Original-Received: from mail-wr0-x229.google.com ([2a00:1450:400c:c0c::229]:41379) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1eoRVG-000265-7b; Wed, 21 Feb 2018 05:19:58 -0500 Original-Received: by mail-wr0-x229.google.com with SMTP id f14so2876528wre.8; Wed, 21 Feb 2018 02:19:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:mail-followup-to:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=RfY/g2YWQWoU72Kfo1dIUA87l0mSw5gAT7mtzdSrRpA=; b=f06JtL6HOeOmOzFPbdN3hzwyKyD0ye5wyH8l5b73e6jghqM7L+R2FpHPg59js35eGu g8EhRq9uRao4wNe2D4UqxuiJjkzaLBwMJ6U/yaIv5mEj6MOQ/qXb8IjRQA6nBxdXZDNa /4Ks+5Y5Ub63oWcibeDbjZ3sdyBbLzgMybB7sHHMVFL+YKZH0aDppS+QFOJgqXHXBuiJ jaaFvPiAEpXn0ACvojAdfaKLCrgLdclShtW8BSgd9aUFwnni+HELVN0VJPnGKLZBvaRK AmBUyWpINAy72+u8MkznJWTgRB7hGsqnGwyGqzS5GVfscTcM7PHLWSINI2gq+eezysSu Ztqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:mail-followup-to :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version; bh=RfY/g2YWQWoU72Kfo1dIUA87l0mSw5gAT7mtzdSrRpA=; b=FZ5VPB//hIfOF0Nvsg45wZi2s+xg7wOvKdATnT3DofqadrEoOGXF8vqKs+j2rFk4Yk VhOOS1FVroyij88yCLryMlqPKoix6PfZO2i8+FzgF4+At1eJ1mN0vvDtosfR/2u6MvK0 TnHsHzTb2pYg1ojLjj0zLKfkLgg1Mt0NzmzSkqdB9KKaeBsVznEJdjqFlvrJtCcCOhay RtFmrIxMli5VjmrMuBPooVdScRpaZjpvuhycaFnntCVVS5+nDttsqRr0C+aAMRT/kHOt pZauzw+/m6Q/Al3S4nYGJkNHcOu2XhrVJ6HnLKwntFSgWy5vc41sQIDd+NRiIQu795KQ PKkQ== X-Gm-Message-State: APf1xPDydbrFpQL/a+FJQbU/qHAQuWzobL8VwsSPHOF34ReRx/JiX4n6 +yaXMK8Dc15j/j0rnW3XldBzaKTLew0= X-Google-Smtp-Source: AH8x226V/Xck4QGaTtmkr2LDP0oCNha8nI9cvUIahg8vYjUumqiyO+uX4Tiq/b3vZSlgJQ4M1Y06HQ== X-Received: by 10.28.116.4 with SMTP id p4mr1745688wmc.82.1519208396585; Wed, 21 Feb 2018 02:19:56 -0800 (PST) Original-Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id m55sm5068826wrf.38.2018.02.21.02.19.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 21 Feb 2018 02:19:55 -0800 (PST) Mail-Followup-To: emacs-devel@gnu.org Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: (Richard Stallman's message of "Wed, 21 Feb 2018 05:01:30 -0500") X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:1450:400c:c0c::229 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:222960 Archived-At: Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > > What level of support were you thinking of? The Autocrypt > > recommendations include a whole bunch of PGP key generation and setup > > messaging that I'm not convinced are necessary. > > We should consult an expert such as Werner Koch about that. I was unclear: Autocrypt has a setup procedure that involves generating a new PGP key specifically for use with it, and producing a setup email message containing that key. Many users will probably already have a PGP key that they would prefer to use instead, obviating the need for such setup. > Snarfing the key from > > the header and adding it to the user's keyring should be easy enough. [1] > > I suppose that is the job to be done; you've raised the question of how > to do that right. > That's part of what needs to be done. Once the keys are stored somewhere, a decision then needs to be made on a per-message basis as to whether or not to sign/encrypt, the keys need to be kept track of in case they change, and probably more (I haven't committed the Autocrypt specification to memory) > > [1] Or should this go to a separate Autocrypt keyring? > > I never heard of Autocrypt before. What would be the reason for doing > that? It's a whole new method for automatically signing email. People might not want emacs to start adding keys to their default keyring automatically. In the only other similar case I know of, namely elpa package signature checking, a separate keyring is created. Robert