PGP Keys are fairly commonly exchanged through key
servers. It would make key transfer transparent if
people could set a config option and have the gpg pull
the key from a server. This would not lower security by
much, and perhaps we could even designate some machine
somewhere that acted as the gateway for all such requests.
This would be a little exotic I guess, but we could
make it so gaim could "register" a user's public key
with the keyserver using AIM, so we'd have the server
listen to an AIM username that would receive keys,
making sure that the "claimed" AIM identity of the key,
was the same as the person that sent it. Catch my
drift? There are perl libs out there for connecting to
AIM. Doing something like this would require a bit of work.
To ease the burdon on such a machine, we could have it
sign all the keys that came through it and then pass
them along to the pgp key server network at large.
I think it's something worth investigating, though I
lack the impetus to do it all myself, if someone else
is interested in helping, let me know.
Logged In: YES
user_id=31522
I'm sorry it's taken me so long to comment on this..
Keyservers is something we plan on doing for v2.0. Right
now we just want to make the code stable, and then we can
progress on some new ideas. Using keyservers is one of the
first things I'm going to do.
w0d3n
Logged In: YES
user_id=585667
gnupg supports automatic retreval of keys that it dosent have in
its keyring, if you provide a keyserver and enable automatic key
retrival in the config file
by having gaim-e transmith the keyid then gpgme could get it off
of a keyserver