ietf
[Top] [All Lists]

Re: Proposed Proposed Statement on e-mail encryption at the IETF

2015-06-02 13:40:32
On Tue, 2 Jun 2015, Paul Hoffman wrote:

This is a terrible idea. If the IETF mailer thinks it knows my PGP encryption 
key, and I don't because I have lost it or invalidated it, then I cannot read 
the mail from the IETF mailer and will thus lose valuable information. Maybe we 
can develop some interface that allows a user to specify their encryption key 
and remove it at will, but I've never seen such an interface before and suspect 
that its design will have all sorts of pointy edge cases.

Proposal: if you actually want this, develop an interface for telling the 
server your key first. Get buy-in from others active in the IETF, if possible. 
If you can pull this off, it will benefit much more than the IETF.

IETF could run openpgpkey-milter (or successor) to do exactly that.

Paul