-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Dear people at httpd-dev,
My name is Buanzo, and I'm developing an IETF draft regarding OpenPGP
Extensions to the HTTP
Protocol. So far I've implemented HTTP-request signing, and an interesting
session protocol (for web
application's login, via a contribution of Kyle Huff from www.gpgauth.com).
The concept implementation current consists of two software pieces:
* A Mozilla Firefox Addon called "Enigform"
* An Apache module called "mod_auth_openpgp" (soon to be renamed
mod_openpgp)
All OpenPGP tasks use GnuPG and GPGME where applicable.
For a simple explanation of how signed http requests work, you can check out
http://freshmeat.net/articles/view/2599 - The article includes links to m_a_o
and enigform. You can
also visit the Forums at http://foros.buanzo.com.ar/viewforum.php?f=35
Currently I am in the process of implementing the Apache side of
OpenPGP-Encrypted HTTP Requests, by
adding an input filter to m_a_o, as the rest of the functionality is so far
implemented using a
couple of handlers (for PGP-Key importing and OpenPGP support discovery) and
some standard
post-read-request hooks.
My aim is to contribute mod_openpgp to the Apache Software Foundation, and
that's why I've
subscribed to this mailing list.
I have some questions regarding how to properly implement this functionality
into the Apache httpd,
and I believe this to be closer to httpd-dev than modules-dev (although I've
been there since I
first started mod_openpgp, OpenPGP request/response encryption should
definitely be httpd-dev assisted).
I will not started with questions right now, but I'll politely wait for your
questions, if you have
any, so I do not disturb the list :)
Happy to be here,
Buanzo.
- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
SHOW DE FUTURABANDA - Sabado 18 de Agosto 2007 (Speed King, Capital Federal)
Entradas anticipadas a traves de www.futurabanda.com.ar - Punk Rock Melodico
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGn2B1AlpOsGhXcE0RCslmAJ9Era3KzN8qGqT2mvF/SxkcKLXO6wCfWuyK
qXWOPdaJccM0LcG1h+dpT3Q=
=dpa2
-----END PGP SIGNATURE-----
