Re: Public Key Look Up

--On Tuesday, May 11, 2021 14:55 -0400 John Levine
<[email protected]> wrote:

> It appears that Alessandro Vesely  <[email protected]> said:
>>> I think it's a terrible idea both because it puts the keys
>>> in the wrong place and the reasons you gave, extensions are
>>> optional which means not implemented.
>> 
>> I'm not clear why a domain's MX would be the wrong place.
> 
> Because you can't tell the user's relation to the domain.
> Would you want Google to be the authoritative source of keys
> for every gmail user?  Apollo Global Management for every
> Yahoo and AOL user?

Well, if the keys were signed by entities I trusted, I wouldn't
be worried about what "authoritative source" means.  And if they
weren't, not only would I not like that, but it would probably
turn the whole idea into theater rather than security.   And, as
you know at least as well as I do, getting general-purpose keys
signed in a way that could be generally depended on has proven
to be a challenge.(to put it mildly).

And you didn't ask the question of why Google would want to go
into that business given that it would increase their
liabilities, not add significantly to what they already know
about gmail users or the ability to sell ads, and increase the
costs of a "free" service.  But perhaps I'm missing something.

> Personally, as a passive-aggressive mail system operator, the
> only keys my MX would publish would be proxy ones that let my
> MTA decode the mail and do spam and malware filtering.  If my
> users don't like that, they can manage their own fripping keys.

Yeah, something like that.
best,
   john