[guardian-dev] Gibberbot keystore format

[Hans-Christoph Steiner]

Once we nail down IOCipher, it should be pretty easy to store the same gibberbot keystore file in an IOCipher virtual disk.

.hc

On Aug 13, 2012, at 6:53 PM, Miron wrote:

> In my opinion, hat would be too long to leave the private keys unencrypted on disk given that SQLCipher will be integrated.
> 
> Hans-Christoph Steiner <hans at guardianproject.info> wrote:
> 
> On Aug 13, 2012, at 1:36 PM, Miron wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> >>> I'm definitely not talking about import/export but indeed using
> >>> gpg as the keystore.  gpg-agent is a very handy piece of software
> >>> that we would be silly to try to recreate.  Its very well
> >>> tested, audited and deployed.  The same goes for gpg's key
> >>> storage. Gibberbot can access that via the in-progress
> >>> gpgme-for-java interface.
> >> 
> >>> The core idea of PSST is to make a unified crypto identity that
> >>> can be seamlessly used in as many apps as possible, with as
> >>> little input from the user as possible.
> > 
> > Okay, that makes sense now.  I'll implement a stop-gap solution for
> > the curre
>  nt
> issue.
> 
> My only question is: will a stopgap work for the next 6-12 months?  It could be a while before this idea comes to fruition.
> 
> .hc
> 
> > - -- 
> > Miron
> > http://hyper.to/blog/
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.11 (GNU/Linux)
> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> > 
> > iQIVAwUBUCk7K5ifazBIoRa1AQLNVg/7B/Ay22Wm1mCxhJI1NPxPVq09+X/vZafK
> > 0ZS+U9j9PJXGCiUgYPHypDBE1ivHglVyTzZmyzT+9x7S1PIpHkRkLYvWYD9tCb2q
> > nG0eT8cGjBOcIjJWVa5Wa0GmnOisretjFdqbgYms+mGjBVj4uk48iDAiVv41N008
> > tBroMfJz64cnutzUB3LLMIi09ikfzyO/ggY2xYgKRbP9eWb5naoO2AZnka0do/Xz
> > +erY7D2BKnPVe2LAA0p6kAIGwnIS1fuOFa+jCZbYcXK8ZAuAz3evqgyECIOj/vjZ
> > dh2pTixGd+vNkijc+/ZeS6UeR7SlMocX/sALaLHfWRPKekWvVOQquxZYwF7q7JWr
> >
> XkgnweQw+kXZWnMJHXsNQ1UTkPmzQHbCVx570BesHGzqaHKM73Xw2RAIBpfZZ0a5
> > WJo6fz+WsSRy60LwTkzosmRvzkRHc5FxX1J6Ars7f1utxJNEUHtLyHEhjBtKuU4G
> > zS4lJz4RWzEYLuJYkBHMIq7yQ+y6U4x0elgsAvPpVm7TlV31L2g9mArKC2alR0mI
> > wjIRrS8LXx5qXRPtPkNM4S1b0o7r3IZKGzQgFoW8clwkXR9ElWIdBLjMkADzX515
> > ITg3wmd6KW/hP+VqE5d4M+Rz+acrpG7IuAASu0JsKx1mzlFn2XS2dt2mm5zZbw5n
> > I/x67Pc1yKs=
> > =LJZu
> > -----END PGP SIGNATURE-----
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20120813/229fa234/attachment.htm>