Re: PGP security models, was Summary of IETF LC for draft-ietf-dane-openpgpkey

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Mark Andrews <marka@xxxxxxx> writes:

> People don't usually look at the set of hostnames before assigning
> a user id and the reverse is also true.  Who gets change control
> on the resulting domain name when there is a collision?  The user
> or the host?

When is this a problem?  Are you thinking of the conflict between
www.example.org and www@xxxxxxxxxxx?  Why would that cause a problem?  I
believe it is highly unlike for their to ever be a OpenPGP key issued
for www.example.org -- and the practice in the OpenPGP community is to
issue such keys for rooot@xxxxxxxxxxxxxxx instead -- so there shouldn't
be a conflict.  In any case, www@xxxxxxxxxxx might have several OpenPGP
keys, so the client should be prepared to handle multiple records
anyway.

I'm likely missing something here.

/Simon

Attachment: signature.asc
Description: PGP signature


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]