Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > rocksolid.programming > #197

Re: pgp would be nice

Show all headers | View raw

>>2ddb23cb6be90293b7
>Trying to think of good methods to make it simple for end users to want to participate.

I can see two basic ways: 
1) either the nodes offer a piece of js that does the signing (possibly using a local config file) and attaches a file with the signed message automatically when posting.
2) we write a little client to do that (could be in any lanuguage, gui or cli). Then the user would have to download that client and run it locally. To be precise, I don't mean to write a browser here, just some lines to take text and sign it, then make a POST to a predefined node.

Either way, the user would have to trust the code, which might be a showstopper for some already (those would have to do their own coding or do all the steps manually).
In the first case, js would have to be enabled in the browser which is a moot point for many. So I guess the second way is the better one.
Of course this could also be done as a plugin for the browser, but this would be sort of the same as js (from a security point of view, guess it is better to decouple this from the browser).
So the easiest way would probably be to write a shell script that acts as a wrapper for
-an editor to compose the message,
-pgp to make the signature and produce the signature files, and
-curl to make a POST stream to one of the nodes, including all necessary data like username/password, the message and the signature file.
To make it nice, we could give a qt-gui or somesuch.
This local client could be called from links on the webpage of the node, those could also transport additional information so that answering to a message does not require to manually fill the subject and reply-id.
Of course this kind of client software would have to be specific for the OS of the user (so would probably exclude IOS/Android/Windows unless somebody would write code for those - I will most probably not :-), or we use java).
But all of this sounds very doable to me. And not only would it be a supernice way to manage identities for those who want them, it would also enable various ways of flood protection (should we ever need it).
I think I will put that on the todo list.
Maybe the person posting all this stuff on /social has some kind of local solution already.

cheers

trw

-- 
Posted on def2

Back to rocksolid.programming | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: pgp would be nice Anonymous <poster@anon.com> - 2020-12-28 05:16 -0800
  Re: pgp would be nice Retro Guy <retro_guy@retrobbs.rocksolidbbs.com> - 2020-12-30 23:08 -0700

csiph-web