[messaging] Google End-to-End plans on using key directories with a CT-like verification protocol

yan yan at mit.edu
Wed Aug 27 14:32:45 PDT 2014


On 08/27/2014 12:32 PM, Tony Arcieri wrote:
> They plan on having email providers run "Key Directories" and using
> encrypted messages to gossip data about the directories, providing a
> CT-like system:
> 
> https://code.google.com/p/end-to-end/wiki/KeyDistribution
> 

There's a discussion going on in the comment section of the wiki page too.

Since the Key Directories are (at least initially) run by the Identity
Providers (Google, Yahoo, etc.), it doesn't seem very useful to gossip
the Signed Tree Head inside channels controlled by the identity provider
(gmail, yahoo mail, gchat, etc.). I'm curious if others have thoughts on
how this could work using other channels.

-Yan


More information about the Messaging mailing list