[messaging] alternative to OpenPGP?

[Simon Josefsson]

Peter Gutmann <pgut001 at cs.auckland.ac.nz> writes:

> Simon Josefsson <simon at josefsson.org> writes:
>
>>Mansour Moufid <mansourmoufid at gmail.com> writes:
>>
>>> Is there an alternative to the OpenPGP message format?
>>
>>Have you looked at JSON Web Encryption?
>>
>>https://tools.ietf.org/html/rfc7516
>
> JWE is... well, it's an alternative in the same way that S/MIME is, but all
> three formats do more or less the same thing, they just use different bit-
> bagging techniques.  The main difference between the three is that PGP and
> S/MIME use an efficient binary encoding while JWE uses a pretty inefficient
> text encoding (when the RFC appeared my first reaction was "It's PEM
> reinvented thirty years later").  So for:
>
>>I cannot recall any technical advantage it has over OpenPGP though, so if
>>OpenPGP is not sufficient for you, S/MIME likely aren't either.
>
> you could say the same for JWE.

Agreed -- and we would likely say the same about every solution in this
space.  I forgot to mention XML DigSig/Encryption.  It falls into the
same category as the others.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 472 bytes
Desc: not available
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20150814/b9b333e1/attachment.sig>