Hi Watson,

ID-based crypto is not at all an obvious choice for email security.

I would even go further by saying that ID-based crypto has been a
solution in search for a problem so far. In my investigations (based on
prior proposals in the IETF) I could not find benefits with ID-based
crypto.

Ciao
Hannes

On 12/29/2013 07:38 PM, Watson Ladd wrote:
> One obvious solution for end-to-end email encryption is to use
> ID-based cryptography: a new record type would be defined in the DNS
> containing the system key for an ID-based system, and the username
> (everything before the '@') would be the identity used. This would not
> obscure addresses or the fact of communication right now, but would
> prevent interception at intermediate nodes. It would be webmail
> compatible.
>
> Are there any issues beyond the merely cryptographic that I need to
> consider here? Can this be shoehorned into S/MIME, or do we need to do
> something new?  In the next few days I will try to make a
> draft/implementation for this.
>
> Sincerely,
> Watson Ladd
> _______________________________________________
> perpass mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/perpass

_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass

Reply via email to