Hacker News new | ask | show | jobs
by koto1sa 3948 days ago
One of the developers here:

Yes, the Keyring reimplementation is in progress and ends very soon. After the redesign, applications built on top of E2E library will be able to use different sources of both public and private keys (so it's easy to do integrations with GnuPG, hardware keys HKP, or e.g. Facebook).

The API will be similar to what's in https://github.com/google/end-to-end/wiki/Keyring.
1 comments
mikekchar 3948 days ago
One thing that is currently missing from E2E (as far as I can tell having played with it a little in the last month) is any kind of web of trust. When I import a key, I can't tell if it has been signed by me or someone I trust. Is this on the radar for the UI after the Keyring reimplementation is finished?

At the moment, what we've suggested at our work is that people manage keys in GPG and then only export keys into E2E if they trust them. But it would be nice be able to do those kinds of things in E2E (or at least be able to tell if a key was signed by me).

BTW, thanks for working on this!

link
koto1sa 3948 days ago
See https://github.com/google/end-to-end/wiki/Key-Distribution. In short, we don't invest much into WoT.
link
timboslice 3948 days ago
After giving that a read, I'm happy that there are people way smarter than me working on these problems. Kudos to your efforts!
link