On Mon, Aug 18, 2014 at 12:09 AM, Trevor Perrin <[email protected]> wrote:

> A different approach is to have Bob's service provider, as specified
> in his username, be his keyserver [...]
>
> Of course, now Alice needs to authenticate example.com.  A DNS
> solution (DNSSEC or DNSCurve) seems elegant


Apologies if this has already been mentioned, but here's a draft of how to
use DANE in conjunction with S/MIME that looks similar to what you're
proposing:

http://tools.ietf.org/html/draft-ietf-dane-smime-06

-- 
Tony Arcieri
_______________________________________________
Messaging mailing list
[email protected]
https://moderncrypto.org/mailman/listinfo/messaging

Reply via email to