(Is this list "open for business" yet?)
Hello all,
I am interested in a key search mechanism by which I can ask a
key server for a chain of keys which leads between a desired key
and a key that I trust.
For example, if I trust A's key, and I am interested in finding
a chain by which I can trust D, I can ask the key server for the
chain and it will return B and C (where A has signed B's key, B
has signed C's key, and C has signed D's).
I actually have code that will do this for a PGP 2.6 key ring,
and am willing to contribute it to whomever is interested in it.
Basically it builds a directed graph whose vertices are the keys
and whose edges point from a key to all keys that have signed it.
It then does a breadth-first search of the graph, starting at the
requested key, stopping when it finds one of the keys listed as
"trusted". When it finds a trusted key, it returns all the keys
on the path from the starting vertex to the ending vertex.
Is anyone interested in seeing this code?
__
Ben Cox
cox(_at_)transarc(_dot_)com