[openpgp] Re: Certificate discovery over HKP

Hey Andrew and list,

I read the document you linked, and the first question I have is - what exactly is the "thing to be done" here that we are trying to solve? It is unclear to me both what the exact goals are, and how HKP is the best way achieve them. 

"OpenPGP certificate discovery over HKP" sounds like we are designing a technical alternative to WKD, but what are the properties we want?

If it's to allow "recursive" lookups, we could just add a line to the wkd policy file that allows it. Or, even easier, servers could just do it without asking, since certificates available via WKD must be considered public info (modulo enumeration) anyways.

I apologize if I'm just missing context from discussions at the summit (I would really have liked to attend :)


 - V

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]