Page MenuHome GnuPG

nagydani (Daniel A. Nagy)
User

Projects

User does not belong to any projects.

User Details

User Since
Mar 27 2017, 4:47 PM (404 w, 2 d)
Availability
Available

Recent Activity

Jul 19 2012

nagydani added a comment to T1417: Unhashed signature subpacket "preferred keyserver" ignored for document signatures.

Revocations are only an issue with key updates, which must be (and, in fact,
are) made on the basis of preferred keyserver URL's in self-signatures on keys.

With document signatures, the only important issue is to have the key retrieved
from somewhere, if it is not known to the verifier. I cannot see any way in
which an attacker can make things worse for anyone, if retrieval is attempted
from URL's in unhashed subpackets if the key is not available.

The application that I am working on is a pontentially very large archive of
signed documents (financial transaction authorizations) that also contains the
corresponding keys. The archive is supposed to be distributed/redundant, with
both the documents and the keys available from multiple servers and it can also
be migrated from one server to another. Servers can go online and offline all
the time, no address is permanent. It is trivially easy for a server to include
its own address into an unhashed subpacket and very useful, too. The server does
not have access to private keys.

Nothing needs to be explained to users if they can simply
gpg --verify document.asc
after retrieving it from the server. Much more needs to be explained if
instructions are necessary where to retrieve the corresponding public key.
Polluting the HKP/SKS infrastructure with all the keys (most of which are
disposable) that we use would impose an unfair burden on the infrastructure and
as such would be a very irresponsible thing to do.

Jul 19 2012, 2:59 PM · Feature Request, gnupg

Jul 18 2012

nagydani added a comment to T1419: pipe-through of clearsigned documents adds an extra newline.

How would not emitting an extra LF interfere with empty messages?
Has this decision been debated? If so, could you point me to the discussion?
Thank you in advance!

Jul 18 2012, 3:02 PM · Not A Bug, Bug Report, gnupg
nagydani added a comment to T1417: Unhashed signature subpacket "preferred keyserver" ignored for document signatures.

I respectfully disagree:
What you write is true for certification signatures, but not for document
signatures. Updates of keys should be driven by keyserver preference indications
on self-signatures on that key and those must obviously be hashed.
However, OpenPGP very cleverly allows for keyserver URLs in document signatures
and does take them into account. They are used for only one purpose: do download
the key if it is not known. In this case, unhashed subpackets are as good as
hashed ones (actually, better), because the cryptographic binding between the
signature and the public key can be verified anyway, there is no such thing as a
wrong source for the public key, if it does correspond to the signature.

Jul 18 2012, 3:00 PM · Feature Request, gnupg

Jul 16 2012

nagydani renamed T1419: pipe-through of clearsigned documents adds an extra newline from pipe-though of clearsigned documents adds an extra newline to pipe-through of clearsigned documents adds an extra newline.
Jul 16 2012, 2:05 AM · Not A Bug, Bug Report, gnupg
nagydani added a comment to T1419: pipe-through of clearsigned documents adds an extra newline.

Jul 16 2012, 1:59 AM · Not A Bug, Bug Report, gnupg
nagydani set Version to gpg (GnuPG) 1.4.10 on T1419: pipe-through of clearsigned documents adds an extra newline.
Jul 16 2012, 1:59 AM · Not A Bug, Bug Report, gnupg
nagydani added projects to T1419: pipe-through of clearsigned documents adds an extra newline: gnupg, Bug Report.
Jul 16 2012, 1:59 AM · Not A Bug, Bug Report, gnupg

Jul 15 2012

nagydani set Version to gpg (GnuPG) 1.4.10 on T1417: Unhashed signature subpacket "preferred keyserver" ignored for document signatures.
Jul 15 2012, 10:18 AM · Feature Request, gnupg
nagydani added projects to T1417: Unhashed signature subpacket "preferred keyserver" ignored for document signatures: gnupg, Bug Report.
Jul 15 2012, 10:18 AM · Feature Request, gnupg