Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > rocksolid.programming > #210

Re: pgp would be nice

From Retro Guy <retro_guy@retrobbs.rocksolidbbs.com>
Newsgroups rocksolid.programming
Subject Re: pgp would be nice
Date 2020-12-30 23:08 -0700
Organization RetroBBS
Message-ID <20201230230822.4b06c280@desktop14.dt> (permalink)
References <code.605.3umyox@anon.com> <code.645.2p98lm@anon.com>

Show all headers | View raw


On Mon, 28 Dec 2020 05:16:29 -0800
Anonymous <poster@anon.com> wrote:

> >>2ddb23cb6be90293b7
> >Trying to think of good methods to make it simple for end users to
> >want to participate.
> 
> I can see two basic ways: 
> 1) either the nodes offer a piece of js that does the signing
> (possibly using a local config file) and attaches a file with the
> signed message automatically when posting. 2) we write a little
> client to do that (could be in any lanuguage, gui or cli). Then the
> user would have to download that client and run it locally. To be
> precise, I don't mean to write a browser here, just some lines to
> take text and sign it, then make a POST to a predefined node.

Either way and the user must trust the code of course. If it's a matter
of trust, maybe javascript is the easiest way. If you allow the js, you
can sign, if you don't it's just a feature you don't use.

Currently, rslight uses javascript for two simple things:

1. When you click 'quote' on replying to a message, it puts the quote
in the text box for you. 

2. Displaying times for posts in your local time (or UTC if js disabled)

Either one of these things is not very important, so if you don't
enable javascript they won't work, and that's not really a big deal.

I would think signing a message could be the same. The support is there
in the software, and it's up to the end user whether to use it or not.

Also, another idea:

rslight currently adds a hash to all outgoing messages built from the
the message and header, and the site key. This is sort of a
signature that shows the post is really from this site. Adding the
username is very simple to do, plus all rslight users have a key in
their config (for encrypted messages and maybe future stuff).

Then there would need to be trusted communication between nodes to
share this trust. I think we'd like to do this for other
features/reasons also, so it could be useful.

Thoughts?

Back to rocksolid.programming | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Re: pgp would be nice Anonymous <poster@anon.com> - 2020-12-28 05:16 -0800
  Re: pgp would be nice Retro Guy <retro_guy@retrobbs.rocksolidbbs.com> - 2020-12-30 23:08 -0700

csiph-web