[guardian-dev] Gibberbot keystore format

Miron c1.android at niftybox.net
Mon Aug 13 18:53:24 EDT 2012


In my opinion, hat would be too long to leave the private keys unencrypted on disk given that SQLCipher will be integrated.

Hans-Christoph Steiner <hans at guardianproject.info> wrote:


On Aug 13, 2012, at 1:36 PM, Miron wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
>>> I'm definitely not talking about import/export but indeed using
>>> gpg as the keystore. gpg-agent is a very handy piece of software
>>> that we would be silly to try to recreate. Its very well
>>> tested, audited and deployed. The same goes for gpg's key
>>> storage. Gibberbot can access that via the in-progress
>>> gpgme-for-java interface.
>> 
>>> The core idea of PSST is to make a unified crypto identity that
>>> can be seamlessly used in as many apps as possible, with as
>>> little input from the user as possible.
> 
> Okay, that makes sense now. I'll implement a stop-gap solution for
> the current issue.

My only question is: will a stopgap work for the next 6-12 months? It could be a while before this idea comes to fruition.

.hc

> - -- 
> Miron
> http://hyper.to/blog/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQIVAwUBUCk7K5ifazBIoRa1AQLNVg/7B/Ay22Wm1mCxhJI1NPxPVq09+X/vZafK
> 0ZS+U9j9PJXGCiUgYPHypDBE1ivHglVyTzZmyzT+9x7S1PIpHkRkLYvWYD9tCb2q
> nG0eT8cGjBOcIjJWVa5Wa0GmnOisretjFdqbgYms+mGjBVj4uk48iDAiVv41N008
> tBroMfJz64cnutzUB3LLMIi09ikfzyO/ggY2xYgKRbP9eWb5naoO2AZnka0do/Xz
> +erY7D2BKnPVe2LAA0p6kAIGwnIS1fuOFa+jCZbYcXK8ZAuAz3evqgyECIOj/vjZ
> dh2pTixGd+vNkijc+/ZeS6UeR7SlMocX/sALaLHfWRPKekWvVOQquxZYwF7q7JWr
> XkgnweQw+kXZWnMJHXsNQ1UTkPmzQHbCVx570BesHGzqaHKM73Xw2RAIBpfZZ0a5
> WJo6fz+WsSRy60LwTkzosmRvzkRHc5FxX1J6Ars7f1utxJNEUHtLyHEhjBtKuU4G
> zS4lJz4RWzEYLuJYkBHMIq7yQ+y6U4x0elgsAvPpVm7TlV31L2g9mArKC2alR0mI
> wjIRrS8LXx5qXRPtPkNM4S1b0o7r3IZKGzQgFoW8clwkXR9ElWIdBLjMkADzX515
> ITg3wmd6KW/hP+VqE5d4M+Rz+acrpG7IuAASu0JsKx1mzlFn2XS2dt2mm5zZbw5n
> I/x67Pc1yKs=
> =LJZu
> -----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20120813/b59f030e/attachment-0001.htm>


More information about the Guardian-dev mailing list