[messaging] alternative to OpenPGP?
simon at josefsson.org
Fri Aug 14 03:37:38 PDT 2015
Peter Gutmann <pgut001 at cs.auckland.ac.nz> writes:
> Simon Josefsson <simon at josefsson.org> writes:
>>Mansour Moufid <mansourmoufid at gmail.com> writes:
>>> Is there an alternative to the OpenPGP message format?
>>Have you looked at JSON Web Encryption?
> JWE is... well, it's an alternative in the same way that S/MIME is, but all
> three formats do more or less the same thing, they just use different bit-
> bagging techniques. The main difference between the three is that PGP and
> S/MIME use an efficient binary encoding while JWE uses a pretty inefficient
> text encoding (when the RFC appeared my first reaction was "It's PEM
> reinvented thirty years later"). So for:
>>I cannot recall any technical advantage it has over OpenPGP though, so if
>>OpenPGP is not sufficient for you, S/MIME likely aren't either.
> you could say the same for JWE.
Agreed -- and we would likely say the same about every solution in this
space. I forgot to mention XML DigSig/Encryption. It falls into the
same category as the others.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 472 bytes
Desc: not available
More information about the Messaging