[Fwd: [PGP-USERS] PGP Global Directory]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

New keyserver at PGP.com

- -------- Original Message --------
Subject: [PGP-USERS] PGP Global Directory
Date: Wed, 8 Dec 2004 21:11:37 -0800
From: Jon Callas <[email protected]>
Reply-To: [email protected]
To: [email protected]

Recently, I wrote to thank you for providing feedback on PGP
Corporation's
keyserver product and to reveal that a new public keyserver, called the
PGP
Global Directory, is going into beta. Today, PGP Corporation will make
the
PGP Global Directory Beta available to the public at
https://keyserver-beta.pgp.com.

THE NEW PGP GLOBAL DIRECTORY
The PGP Global Directory is a directory of public keys that have had
their
associated email addresses verified to make it easier to find the right
key
for a given person and email address. To verify an uploaded key, the PGP
Global Directory will send an email to the associated email address to
confirm that the owner wishes to add the key to the directory. Once the
owner of the key has followed the link provided in the verification
email,
the PGP Global Directory will sign the key and make it publicly
available.
Every 6 months, the PGP Global Directory will re-verify keys by sending
a
verification email to the associated email addresses. If a key owner
fails
to respond, his/her key will be removed from the PGP Global Directory.

KEY MIGRATION
Over the next several weeks, the new PGP Global Directory will be
sending
email invitations to the most active users of the existing public
keyserver
(keyserver.pgp.com) asking them to verify their key and their email
address
as part of transitioning users to the new PGP Global Directory. People
who
haven't yet received an invitation can go to
https://keyserver-beta.pgp.com
and upload their keys directly.

FREQUENTLY ASKED QUESTIONS (FAQ)
Because there might be questions about the PGP Global Directory, I
thought
I'd try to answer some of the most common ones:

Q: Is the PGP Global Directory a replacement for keyserver.pgp.com?

A: Yes. Although the beta will be run at keyserver-beta.pgp.com, the
server
will be transitioned to keyserver.pgp.com once the beta is complete. The
current keyserver.pgp.com will be transitioned at the same time to
keyserver-legacy.pgp.com.

Q: Does PGP Corporation charge for access to the PGP Global Directory?
A: No. The PGP Global Directory is a free service offered by PGP
Corporation
to make it easier to find and trust the universe of PGP keys.

Q: Will this service synchronize with other keyservers? What
system/algorithm does your keyserver use to synchronize between servers?
A: The PGP Global Directory does not synchronize with other keyservers.
We're not opposed to it, but we're not sure what it will mean to
synchronize
with other PGP keyservers. We're re-thinking what a global distributed
network of authenticated keyservers looks like. We believe
synchronization
has merit, but it doesn't scale to have every keyserver in the world
store
and replicate all keys.

Q: How do I manage keys for which I've forgotten my passphrase?
A: You can delete a key from the PGP Global Directory; part of this
process
will require proof of ownership of the email account associated with
that
key.

Q: Will the new keyserver support photoID packets and multiple subkeys,
for
example (RFC 2440 and RFC2440bis)?
A: Yes.

Q: Will it work with existing PGP Desktop installations? How about with
GPG?
A: Absolutely. The PGP Global Directory will accept OpenPGP keys,
including
those created by GPG. Existing PGP Desktop users can also use the PGP
Global
Directory as a source of keys, just like any other keyserver.

If you have other questions, you'll find additional information on the
PGP
Global Directory Beta at
http://www.pgp.com/downloads/beta/globaldirectory/.

	Jon

- --
Jon Callas
CTO, CSO
PGP Corporation         Tel: +1 (650) 319-9016
3460 West Bayshore      Fax: +1 (650) 319-9001
Palo Alto, CA 94303     PGP: ed15 5bdf cd41 adfc 00f3
USA                          28b6 52bf 5a46 bc98 e63d


_______________________________________________
PGP-USERS mailing list
[email protected]
http://lists.cryptorights.org/mailman/listinfo/pgp-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.93-cvs-2004-11-27 (Windows 2000 SP4)
Comment: When cryptography is outlawed, b25seSBvdXRsYXdzIHdpbGwgdXNlIG
Comment: Annoy John Asscraft -- Use Strong Encryption.
Comment: It's YOUR right - for the time being.
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBt/PKHQSsSmCNKhARAj13AJ9qQKSNlUr91eJiaGRPJNdxewd/5ACg5W7J
dC3jtndKKLiWGSOmgDiBQaE=
=luns
-----END PGP SIGNATURE-----


______________________________________________________________
Archives:         http://groups.yahoo.com/group/PGP-Basics/messages
OT List:          http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:     mailto:[email protected]