Menu

#1 Make Plugin Use KeyServers

open
nobody
None
5
2001-12-28
2001-12-28
No

PGP Keys are fairly commonly exchanged through key
servers. It would make key transfer transparent if
people could set a config option and have the gpg pull
the key from a server. This would not lower security by
much, and perhaps we could even designate some machine
somewhere that acted as the gateway for all such requests.

This would be a little exotic I guess, but we could
make it so gaim could "register" a user's public key
with the keyserver using AIM, so we'd have the server
listen to an AIM username that would receive keys,
making sure that the "claimed" AIM identity of the key,
was the same as the person that sent it. Catch my
drift? There are perl libs out there for connecting to
AIM. Doing something like this would require a bit of work.

To ease the burdon on such a machine, we could have it
sign all the keys that came through it and then pass
them along to the pgp key server network at large.

I think it's something worth investigating, though I
lack the impetus to do it all myself, if someone else
is interested in helping, let me know.

Discussion

  • Eric Krause

    Eric Krause - 2002-07-12

    Logged In: YES
    user_id=31522

    I'm sorry it's taken me so long to comment on this..
    Keyservers is something we plan on doing for v2.0. Right
    now we just want to make the code stable, and then we can
    progress on some new ideas. Using keyservers is one of the
    first things I'm going to do.
    w0d3n

     
  • Steven Michalske

    Logged In: YES
    user_id=585667

    gnupg supports automatic retreval of keys that it dosent have in
    its keyring, if you provide a keyserver and enable automatic key
    retrival in the config file

    by having gaim-e transmith the keyid then gpgme could get it off
    of a keyserver

     

Log in to post a comment.

MongoDB Logo MongoDB