<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div>Once we nail down IOCipher, it should be pretty easy to store the same gibberbot keystore file in an IOCipher virtual disk.</div><div><br></div><div>.hc</div><br><div><div>On Aug 13, 2012, at 6:53 PM, Miron wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>In my opinion, hat would be too long to leave the private keys unencrypted on disk given that SQLCipher will be integrated.<br><br><div class="gmail_quote">Hans-Christoph Steiner <<a href="mailto:hans@guardianproject.info">hans@guardianproject.info</a>> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre style="white-space: pre-wrap; word-wrap:break-word; font-family: sans-serif"><br>On Aug 13, 2012, at 1:36 PM, Miron wrote:<br><br>> -----BEGIN PGP SIGNED MESSAGE-----<br>> Hash: SHA1<br>> <br>>>> I'm definitely not talking about import/export but indeed using<br>>>> gpg as the keystore. gpg-agent is a very handy piece of software<br>>>> that we would be silly to try to recreate. Its very well<br>>>> tested, audited and deployed. The same goes for gpg's key<br>>>> storage. Gibberbot can access that via the in-progress<br>>>> gpgme-for-java interface.<br>>> <br>>>> The core idea of PSST is to make a unified crypto identity that<br>>>> can be seamlessly used in as many apps as possible, with as<br>>>> little input from the user as possible.<br>> <br>> Okay, that makes sense now. I'll implement a stop-gap solution for<br>> the curre
nt
issue.<br><br>My only question is: will a stopgap work for the next 6-12 months? It could be a while before this idea comes to fruition.<br><br>.hc<br><br>> - -- <br>> Miron<br>> <a href="http://hyper.to/blog">http://hyper.to/blog</a>/<br>> -----BEGIN PGP SIGNATURE-----<br>> Version: GnuPG v1.4.11 (GNU/Linux)<br>> Comment: Using GnuPG with Mozilla - <a href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org</a>/<br>> <br>> iQIVAwUBUCk7K5ifazBIoRa1AQLNVg/7B/Ay22Wm1mCxhJI1NPxPVq09+X/vZafK<br>> 0ZS+U9j9PJXGCiUgYPHypDBE1ivHglVyTzZmyzT+9x7S1PIpHkRkLYvWYD9tCb2q<br>> nG0eT8cGjBOcIjJWVa5Wa0GmnOisretjFdqbgYms+mGjBVj4uk48iDAiVv41N008<br>> tBroMfJz64cnutzUB3LLMIi09ikfzyO/ggY2xYgKRbP9eWb5naoO2AZnka0do/Xz<br>> +erY7D2BKnPVe2LAA0p6kAIGwnIS1fuOFa+jCZbYcXK8ZAuAz3evqgyECIOj/vjZ<br>> dh2pTixGd+vNkijc+/ZeS6UeR7SlMocX/sALaLHfWRPKekWvVOQquxZYwF7q7JWr<br>>
XkgnweQw+kXZWnMJHXsNQ1UTkPmzQHbCVx570BesHGzqaHKM73Xw2RAIBpfZZ0a5<br>> WJo6fz+WsSRy60LwTkzosmRvzkRHc5FxX1J6Ars7f1utxJNEUHtLyHEhjBtKuU4G<br>> zS4lJz4RWzEYLuJYkBHMIq7yQ+y6U4x0elgsAvPpVm7TlV31L2g9mArKC2alR0mI<br>> wjIRrS8LXx5qXRPtPkNM4S1b0o7r3IZKGzQgFoW8clwkXR9ElWIdBLjMkADzX515<br>> ITg3wmd6KW/hP+VqE5d4M+Rz+acrpG7IuAASu0JsKx1mzlFn2XS2dt2mm5zZbw5n<br>> I/x67Pc1yKs=<br>> =LJZu<br>> -----END PGP SIGNATURE-----<br><br></pre></blockquote></div></div></blockquote></div><br></body></html>