headers
Christoph Moser | 3 Oct 1998 15:25
Picon

Packet Tag 17 ?

Hi !

I just installed PGP 6.0 and by analyzing pubring.pkr I found packets with
a packet tag 17. Could I be wrong or is this a new kind of tag ?

Bye

   Christoph

-----------------------------------------------------------
Christoph Moser - Student of Computer Science and Business
                  University of Siegen

Email:            moser <at> student.uni-siegen.de
Tel. :            +49 271 71883 
-----------------------------------------------------------
PGP-Key available on request
Permalink | Reply | 1 comment |
headers
Werner Koch | 3 Oct 1998 20:32
Picon

Re: Packet Tag 17 ?

Christoph Moser <moser <at> student.uni-siegen.de> writes:

> I just installed PGP 6.0 and by analyzing pubring.pkr I found packets with
> a packet tag 17. Could I be wrong or is this a new kind of tag ?

I think it is used for a user-id with an image.  There was a
discussion some weeks ago about this.

  Werner
Permalink | Reply | 0 comments |
headers
John W. Noerenberg | 9 Oct 1998 07:58

IESG action on openpgp-format


The IESG reviewed  openpgp-formats today.  They are willing to advance
the draft to PROPOSED STANDARD, however there remains one issue to
resolve.  openpgp-formats does not specify a method to register new
identifiers such as tags for algorithms.  For now, the IESG will
advance the document by adding a note saying that such requests must
be submitted to the IESG Security Area Director(s) to be be considered
or forwarded to an appropriate WG for their consideration.  This note
will be added to a new draft revision (-08) that will posted and then
submitted to the RFC Editor to be promoted to PROPOSED.

However, to go beyond PROPOSED we need to agree on a procedure to
register tags, and to formalize it in the protocol.

<removing the chairman's hat>

I think the IESG's note is basically the right thing to do.  I suggest
a new subsection be added to Section 12 Notes on Algorithms.  This
subsection specifies that requests to assign new algorithm tags be
submitted to the IANA for registration.  When the IANA receives such a
request, they will request that the IESG Security Area Director(s)
review the request.  The Area Directors will assign the task of
reviewing the request to a knowledgable group. This group may be a
currently active WG of the IETF working on OpenPGP-related protocols,
members of the IAB knowledgeable about OpenPGP protocols, or other
individuals recognized as knowledgeable in this area.

Comments?
(Continue reading)

Permalink | Reply | 3 comments |
headers
Bill Frantz | 9 Oct 1998 18:26
Picon

Re: IESG action on openpgp-format

At 9:58 PM -0800 10/8/98, John  W. Noerenberg wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>The IESG reviewed  openpgp-formats today.  They are willing to advance
>the draft to PROPOSED STANDARD, however there remains one issue to
>resolve.  openpgp-formats does not specify a method to register new
>identifiers such as tags for algorithms.  For now, the IESG will
>advance the document by adding a note saying that such requests must
>be submitted to the IESG Security Area Director(s) to be be considered
>or forwarded to an appropriate WG for their consideration.  This note
>will be added to a new draft revision (-08) that will posted and then
>submitted to the RFC Editor to be promoted to PROPOSED.
>
>However, to go beyond PROPOSED we need to agree on a procedure to
>register tags, and to formalize it in the protocol.
>

All Right!

><removing the chairman's hat>
>
>I think the IESG's note is basically the right thing to do.  I suggest
>a new subsection be added to Section 12 Notes on Algorithms.  This
>subsection specifies that requests to assign new algorithm tags be
>submitted to the IANA for registration.  When the IANA receives such a
>request, they will request that the IESG Security Area Director(s)
>review the request.  The Area Directors will assign the task of
>reviewing the request to a knowledgable group. This group may be a
>currently active WG of the IETF working on OpenPGP-related protocols,
>members of the IAB knowledgeable about OpenPGP protocols, or other
(Continue reading)

Permalink | Reply | 0 comments |
headers
Jon Callas | 9 Oct 1998 20:04
Favicon

Re: IESG action on openpgp-format

I'm editing up a couple of paragraphs to reflect this IANA policy.

I'll be sending it out this afternoon, and I'm going to CC this list unless
someone hollers.

Yes, I know it's an 140K message. However, if there are any more
last-minute things that have to be done, I want to be able to do them this
weekend or Monday. There better not be, but I don't want to have an oops in
there.

	Jon

-----
Jon Callas                                  jon <at> pgp.com
CTO, Total Network Security                 3965 Freedom Circle
Network Associates, Inc.                    Santa Clara, CA 95054
(408) 346-5860                              
Fingerprints: D1EC 3C51 FCB1 67F8 4345 4A04 7DF9 C2E6 F129 27A9 (DSS)
              665B 797F 37D1 C240 53AC 6D87 3A60 4628           (RSA)
Permalink | Reply | 0 comments |
headers
Jon Callas | 10 Oct 1998 02:56
Favicon

Re: IESG action on openpgp-format

At 11:04 AM 10/9/98 -0700, Jon Callas wrote:

   I'll be sending it out this afternoon, and I'm going to CC this list unless
   someone hollers.

Three people hollered. We'll get it up soon.

	Jon

-----
Jon Callas                                  jon <at> pgp.com
CTO, Total Network Security                 3965 Freedom Circle
Network Associates, Inc.                    Santa Clara, CA 95054
(408) 346-5860                              
Fingerprints: D1EC 3C51 FCB1 67F8 4345 4A04 7DF9 C2E6 F129 27A9 (DSS)
              665B 797F 37D1 C240 53AC 6D87 3A60 4628           (RSA)
Permalink | Reply | 0 comments |
headers
David M. Balenson | 12 Oct 1998 17:29

NDSS '99 Registration Now Taking Place!!

R E G I S T E R   N O W ! !

THE INTERNET SOCIETY'S
1999 NETWORK AND DISTRIBUTED SYSTEM SECURITY (NDSS) SYMPOSIUM
February 3-5, 1999
Catamaran Resort Hotel
San Diego, California
General Chair:   Steve Welke, Trusted Computer Solutions
Program Chairs:  Steve Kent, BBN Technologies
                 Gene Tsudik, USC/Information Sciences Institute

ONLINE INFORMATION AND REGISTRATION:  http://www.isoc.org/ndss99
EARLY REGISTRATION DISCOUNT DEADLINE:  January 6, 1999

The 6th annual NDSS Symposium brings together researchers,
implementers, and users of network and distributed system security
technologies to discuss today's important security issues and
challenges.  The Symposium provides a mix of technical papers and
panel presentations that describe promising new approaches to
security problems that are practical and, to the extent possible,
have been implemented.  NDSS fosters the exchange of technical
information and encourages the Internet community to deploy available
security technologies and develop new solutions to unsolved problems.

KEYNOTE SPEAKER: Whitfield Diffie, Sun Microsystems.  Co-author of
"Privacy on the Line: The Politics of Wiretapping and Encryption."

THIS YEAR'S TOPICS INCLUDE:
- Secure Password-Based Protocol for Downloading a Private Key
- A Real-World Analysis of Kerberos Password Security
(Continue reading)

Permalink | Reply | 0 comments |
headers
Kazu Yamamoto | 13 Oct 1998 14:17

suffix for PGP exported key

I received a question about suffix for PGP exported key embedded in
PGP/MIME. RFC 2015 defines the application/pgp-keys content type but
doesn't define its recommended suffix, which is stored in
Content-Disposition.

It may not be a protocol issue but such recommendation is certainly
useful for Windows (and others) applications. Good examples are found
in the S/MIME spec.

Any comments?

--Kazu
Permalink | Reply | 3 comments |
headers
Internet-Drafts | 13 Oct 1998 16:26
Picon
Favicon

I-D ACTION:draft-ietf-openpgp-formats-08.txt

Note: This revision reflects comments received during the last call period.

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the An Open Specification for Pretty Good Privacy 
Working Group of the IETF.

	Title		: OpenPGP Message Format
	Author(s)	: J. Callas, L. Donnerhacke, H. Finney, R. Thayer
	Filename	: draft-ietf-openpgp-formats-08.txt
	Pages		: 61
	Date		: 12-Oct-98
	
   This document is maintained in order to publish all necessary
   information needed to develop interoperable applications based on
   the OpenPGP format. It is not a step-by-step cookbook for writing an
   application. It describes only the format and methods needed to
   read, check, generate, and write conforming packets crossing any
   network. It does not deal with storage and implementation questions.
   It does, however, discuss implementation issues necessary to avoid
   security flaws.

   Open-PGP software uses a combination of strong public-key and
   symmetric cryptography to provide security services for electronic
   communications and data storage.  These services include
   confidentiality, key management, authentication, and digital
   signatures. This document specifies the message formats used in
   OpenPGP.

Internet-Drafts are available by anonymous FTP.  Login with the username
"anonymous" and a password of your e-mail address.  After logging in,
(Continue reading)

Permalink | Reply | 1 comment |
headers
Jon Callas | 13 Oct 1998 20:15
Favicon

Re: suffix for PGP exported key

At 09:17 PM 10/13/98 +0900, you wrote:
   I received a question about suffix for PGP exported key embedded in
   PGP/MIME. RFC 2015 defines the application/pgp-keys content type but
   doesn't define its recommended suffix, which is stored in
   Content-Disposition.

The traditional suffixes are .pgp for binary and .asc for armored.

	Jon

-----
Jon Callas                                  jon <at> pgp.com
CTO, Total Network Security                 3965 Freedom Circle
Network Associates, Inc.                    Santa Clara, CA 95054
(408) 346-5860                              
Fingerprints: D1EC 3C51 FCB1 67F8 4345 4A04 7DF9 C2E6 F129 27A9 (DSS)
              665B 797F 37D1 C240 53AC 6D87 3A60 4628           (RSA)
Permalink | Reply | 2 comments |

Gmane