Differences between revisions 5 and 21 (spanning 16 versions)

Much easier Email crypto, by fetching pubkey via HTTPS

How does it work?

As an email user, you just select the recipient(s) and can see that the email will be encrypted.

If you and your peers use email-providers offering this "web key service", it works by the first email. Otherwise encryption will start after you have exchanged some emails.

Technically your email client will automatically

prepare for this by creating a crypto key for you and uploading it to your provider (or second best to public keyservers).
sign all emails so others see that you are ready for crypto (unless you opt out)
ask the mail provider of your recipients for their pubkeys.

An email-provider offering the "web key service" technically has to

provide a pubkey for users via HTTPS
allow each user's email client to automatically manage the pubkey that gets published by email.

Details / Discussion of the proposal

Pubkey Distribution Concept <- the (technical) details

2016-09-08 OpenPGP.conf presentation by Werner Koch: Abstract Slides.PDF
2016-09-08 OpenPGP.conf presentation by Bernhard Reiter, pages 21-24 Slides.ODP Slides.PDF
2016-09-09 OpenPGP-Schlüssel über HTTPS verteilen Golem news by Hanno Böck
2016-09-11 Spezifikation für die Verteilung von OpenPGP-Keys per HTTPS veröffentlicht Heise news by Johannes Merkert
2016-09-11 Anmerkungen zum Web Key Service gnupg-de@ by Werner Koch
2016-10-05 Draft 02 of the specs published (see details page linked above).

The elaborated proposal is a result of the EasyGpg2016 contract.

Implementations

GnuPG "modern"

WKD lookup experimental since v2.1.12
WKS server and client experimental tools since v2.1.14, see how to run them in GnuPG's blog from 2016-08-30 or the Web Key Service page.

Mail User Agents

planned Kontact Mail/KMail support (part of EasyGpg2016)
planned Thunderbird support (part of EasyGpg2016)

Mail Service Providers

Posteo offers web key directory lookup and service. (Since 2016-12)
(gnupg.org) Testing accounts by request for developers implementing WKS in Free Software MUAs.

WKD stand-a-lone (without WKS)

wks-tools helps to publish a single pubkeyring via static HTTPS.

-  ⇤ ← Revision 5 as of 2016-09-14 14:18:04 → 
  Size: 2618
  Editor: bernhard
  Comment: added section "implementations"
+   ← Revision 21 as of 2016-12-22 14:45:20 → ⇥
  Size: 3098
  Editor: bernhard
  Comment: moved too much contents to new page WKDHosting, removed table of contents
-Deletions are marked like this.
+Additions are marked like this.
 Line 1:
 = Much easier Email crypto, by fetching pubkey via HTTPS
 Line 6:
 If you and your peers use email-providers offering this "web key service",
 Line 11:
 * prepare for this by creating a crypto key for you and uploading it to your provider
 Line 17:
-* provide a pubkey for each user via ~HT~TPS
+* provide a pubkey for users via ~HT~TPS
 Line 19:
-Line 22:
+Line 24:
+**[[EasyGpg2016/PubkeyDistributionConcept|Pubkey Distribution Concept]] <- the (technical) details**
-Line 23:
+Line 26:
-* [[EasyGpg2016/PubkeyDistributionConcept]] <- the (technical) details
* 2016-09-08 ~OpenPGP.conf presentation by Werner Koch: 
  [[https://www.openpgp-conf.org/program.html#werner|Abstract]]
+* 2016-09-08 ~OpenPGP.conf presentation by Werner Koch:
  [[https://www.openpgp-conf.org/program.html#werner|Abstract]]
-Line 27:
+Line 29:
 * 2016-09-08 ~OpenPGP.conf presentation by Bernhard Reiter, pages 21-24
-Line 30:
+Line 32:
 * 2016-09-09
-Line 33:
+Line 35:
-* 2016-09-11 
  //[[http://lists.gnupg.org/pipermail/gnupg-de/2016-September/000547.html|Anwerkungen zum Web Key Service]]// gnupg-de@ by Werner Koch
+* 2016-09-11
  //[[http://lists.gnupg.org/pipermail/gnupg-de/2016-September/000547.html|Anmerkungen zum Web Key Service]]// gnupg-de@ by Werner Koch
* 2016-10-05 Draft 02 of the specs published (see details page linked above).
-Line 40:
+Line 43:
 === GnuPG "modern"
-Line 42:
+Line 45:
-* WKS server and client experimental tools since v2.1.14, 
  see //[[https://gnupg.org/blog/20160830-web-key-service.html|how to run them in GnuPG's blog vom 2016-08-30]]//
+* WKS server and client experimental tools since v2.1.14,
  see //[[https://gnupg.org/blog/20160830-web-key-service.html|how to run them in GnuPG's blog from 2016-08-30]]// or the [[WKS|Web Key Service page]].
-Line 48:
+Line 51:
+=== Mail Service Providers
* [[https://posteo.de/en/|Posteo]] offers web key directory lookup and service. (Since 2016-12)
* (gnupg.org) Testing accounts by request for developers implementing WKS in Free Software MUAs.

=== WKD stand-a-lone (without WKS)
 * [[WKDHosting|wks-tools]] helps to publish a single pubkeyring via static HTTPS.