PGP Keyservers and 5.0 DSS/D-H Keys...
Hi Guys (F/M), Just a quick question. Are the current (mostly PGP 2.6.x based) keyservers able to incorporate, store and provide the new PGP 5.0 based DSS/Diffie-Hellman keys? And if not how can one publish (the public part of) such a key using nothing more than email or a web-browser behind a firewall that does not allow a direct connection to a keyserver on port 11371? Ciao, Unicorn. -- ======= _ __,;;;/ TimeWaster ================================================ ,;( )_, )~\| A Truly Wise Man Never Plays PGP: 64 07 5D 4C 3F 81 22 73 ;; // `--; Leapfrog With a Unicorn... 52 9D 87 08 51 AA 35 F0 ==='= ;\ = | ==== Youth is not a time in life, it's a State of Mind! ========
-----BEGIN PGP SIGNED MESSAGE----- In <19970903182604.17756@sequent.com>, on 09/03/97 at 06:26 PM, Unicorn <hvdl@sequent.com> said:
Just a quick question.
Are the current (mostly PGP 2.6.x based) keyservers able to incorporate, store and provide the new PGP 5.0 based DSS/Diffie-Hellman keys? And if not how can one publish (the public part of) such a key using nothing more than email or a web-browser behind a firewall that does not allow a direct connection to a keyserver on port 11371?
All of the PGP public keyservers accept keys & keyrequests by e-mail. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNA2ItI9Co1n+aLhhAQGamwP9GSRL7Z5iVfRydlK4Or+bDS4BRij9oC6g AhlZBVhT8iqT4Kp4C2ConIiTHYaz1B/oI4FZzSf2+F1r0sT8Q1mmfkuKmzYOsJCT ZFyZrWeSpNnbN97s/fGHTz5ranhbLZ/EHj56GqeDtZbZ7c00KLAj170N2FmiK9TH bdjbFkzSDZU= =QhiD -----END PGP SIGNATURE-----
At 06:26 PM 9/3/97 +0200, Unicorn wrote:
Are the current (mostly PGP 2.6.x based) keyservers able to incorporate, store and provide the new PGP 5.0 based DSS/Diffie-Hellman keys? And if not how can one publish (the public part of) such a key using nothing more than email or a web-browser behind a firewall that does not allow a direct connection to a keyserver on port 11371?
Part of your answer is that the 2.6.x servers, once modified, will handle 5.0 keys. We have a keyserver running at keys.efga.org that handles the 2.6.x and the 5.0 keys. Right now I think we only support the PGP5.0 HTML based interface that operates on port 11371. I don't think we implemented web based or email based key submission. This would be trivial to add, we just didn't do it. -- Robert Costner Phone: (770) 512-8746 Electronic Frontiers Georgia mailto:pooh@efga.org http://www.efga.org/ run PGP 5.0 for my public key
There are 2 main flavors of pgp key servers, AND 2 main flavors of pgp. One keyserver (the Graff keyserver) uses perl + a pgp binary to manage keys. This has both a mail & web interface available for it. The other keyserver (the Horowitz keyserver) uses its own data management routines to manage keys & is independent of a pgp binary (which raises some integrity issues, but is a big win). It has a mail interface & runs a server interface on a preselected unprivileged port. The newer version (0.9,2) of the Horowitz server is compatible with the new formats of the pgp 5.0 "packets". The 2 main flavors of pgp, or pgp binaries, are 2.6.x based, the old public available version that everyone has, & the new pgp 5.x version that's just been released by pgp, inc. A windows binary is available from the company & a public release of the source is available & is being worked on. To address the specific question, the 2.6.x pgp binaries cannot understand the new pgp 5.0 keys. They can understand pgp 5.0 keys if pgp 5.0 has chosen to make rsa-style keys. So keyservers running the Graff server using pgp 2.6x binary will reject or ignore new style pgp keys. It was a frequent poster to this list, whose "add" transaction bounced on ESnet's keyserver, that alerted me to the appearance of a beta version of the pgp 5.0 product early this spring. There are also hybrid key servers; people who use features of both the Horowitz & Graff key servers. It appears to me that they mostly use the pgp binary to get check the cryptographic integrity of submitted keys. If you want to read about keyservers, check http://www-swiss.ai.mit.edu/~bal/pks-faq.html as well as the pgp pages at mit & pgp.net If you want to read about the pgp 5.0 effort, http://www.ifi.uio.no/pgp/ There are also keyserver variants & historical versions of pgp of course. The Horowitz server & the pgp 5.0 source are both very new.
participants (4)
-
Michael Helm -
Robert A. Costner -
Unicorn -
William H. Geiger III