[messaging] Thoughts on keyservers

Tony Arcieri bascule at gmail.com
Mon Aug 18 18:43:33 PDT 2014


On Mon, Aug 18, 2014 at 12:09 AM, Trevor Perrin <trevp at trevp.net> wrote:

> A different approach is to have Bob's service provider, as specified
> in his username, be his keyserver [...]
>
> Of course, now Alice needs to authenticate example.com.  A DNS
> solution (DNSSEC or DNSCurve) seems elegant


Apologies if this has already been mentioned, but here's a draft of how to
use DANE in conjunction with S/MIME that looks similar to what you're
proposing:

http://tools.ietf.org/html/draft-ietf-dane-smime-06

-- 
Tony Arcieri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20140818/855f4c6d/attachment.html>


More information about the Messaging mailing list