As mentioned, I was working on drafts to improve publishing OTR and PGP public keys. You can find the drafts here:
https://tools.ietf.org/html/draft-wouters-dane-otrfp-00 Abstract The Off-the-Record (OTR) protocol exchanges public keys in-band. This document describes how to use DANE to securely associate an Instant Message user identified by their email address with an OTR public key. This association helps to authenticate users and protect against MITM attacks. https://tools.ietf.org/html/draft-wouters-dane-openpgp-00 Abstract OpenPGP is a message format for email (and file) encryption, that lacks a standarized secure lookup mechanism to obtain OpenPGP public keys. This document specifies a standarized method for securely publishing and locating OpenPGP public keys in DNS using a new OPENPGPKEY DNS Resource Record. Please discuss the drafts on the appropriate IETF mailing lists, even if you simple agree with the draft. That way, the IETF knows there is an interest in these. Paul _______________________________________________ OTR-dev mailing list OTR-dev@lists.cypherpunks.ca http://lists.cypherpunks.ca/mailman/listinfo/otr-dev
