<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">The keys are tied to the sip account used inside the app, the uuid is for example for <a href="sip:ag@sip2sip.info" class="">sip:ag@sip2sip.info</a><div class=""><br class=""></div><div class="">The app generates these keys on the fly as they do not yet exists anywhere. Also one can replicate these keys among devices to make sure one can read them on all devices. </div><div class=""><br class=""></div><div class="">If, when using the same identity as one’s email, for example then you would want to reuse an existing key, maybe? </div><div class=""><br class=""></div><div class="">Considering the I start the client, I have a SIP account and want to talk to someone lets say <a href="mailto:leenaars@example.com" class="">leenaars@example.com</a></div><div class=""><br class=""></div><div class="">I believe that is fine if I can retrieve the key prior to start a chat. But what is the benefit as at the destination one needs a compatible client as well and the moment you start it, it will generate a new key and exchange it automatically with the other end-point. So the user need not be aware about this key exchange, as knowing about it would introduce complexity (manage the key manually)</div><div class=""><br class=""></div><div class="">So I am struggling with understanding the possible benefits of importing and exporting these keys in to an end-to-end delivery system that takes care automatically about this complexity.</div><div class=""><br class=""></div><div class="">Adrian</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div><blockquote type="cite" class=""><div class="">On 24 Jun 2021, at 11:08, <a href="mailto:michiel.ml@nlnet.nl" class="">michiel.ml@nlnet.nl</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><div class="content-isolator__container"><div class="protected-part"><div class="protected-title">Signed PGP part</div><div class="protected-content">Hi Adrian,<br class=""><br class=""><blockquote type="cite" class="">Given that the keys can be used only inside the app, so one must have the app to make sue of the keys, and the app automatically manages these keys and exchange them, what would be the benefit of a lookup function in a public repository for keys?<br class=""></blockquote><br class="">keys must be obtained in some way. You can of course get them directly from your contacts, and there are a number of mechanisms you could use like keyservers (e.g. <a href="https://keys.openpgp.org" class="">https://keys.openpgp.org</a>), Web Key Directory, DNS records (OPENPGPKEY records), a service like Keyoxide (<a href="https://keyoxide.org" class="">https://keyoxide.org</a>) or just plain from the website of your organisation (<a href="https://nlnet.nl/people/leenaars.key" class="">https://nlnet.nl/people/leenaars.key</a>). The more automated it is, the less likely users are to use it.<br class=""><br class="">We are supporting some of these efforts as NLnet, so if you want to get in touch let me know.<br class=""><br class="">Best,<br class="">Michiel<br class=""><br class=""><blockquote type="cite" class=""><blockquote type="cite" class=""><blockquote type="cite" class=""><blockquote type="cite" class="">* Implement message encryption using OpenPGP<br class=""></blockquote><br class="">THis sounds great. Do you have more information on the implementation. Is it only MESSAGE or SIP messages in general? Have you implemented PGP key lookup somehow?<br class=""></blockquote><br class="">Only SIP Message.<br class=""><br class="">We have not implement key lookup but it could be easily added, I suppose..<br class=""></blockquote></blockquote><br class=""><br class="">-- <br class="">Support NLnet, the open internet and open source with just 5 minutes<br class="">of your time. Make a difference today.<br class=""><br class="">Visit: <a href="http://nlnet.nl/help" class="">http://nlnet.nl/help</a> (English) - <a href="http://nlnet.nl/ayuda" class="">http://nlnet.nl/ayuda</a> (Espanol)<br class=""><br class="">- ---------------------<br class=""><br class="">Do you know people that have ideas to improve the internet? Or maybe you have such an idea yourself? Check out what we can do for you at <a href="https://nlnet.nl/propose" class="">https://nlnet.nl/propose</a> and apply!<br class=""></div></div><br class=""><iframe class="content-isolator__isolated-content" sandbox="allow-scripts" scrolling="auto" width="200" height="10" style="border:none;display:block;overflow:auto;" data-src="data:text/html;charset=UTF-8;base64,PGlmcmFtZS1jb250ZW50IGRhdGEtaWZyYW1lLWhlaWdodD0idHJ1ZSI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188QlI+U0lQQmV5b25kVm9JUCBtYWlsaW5nIGxpc3Q8QlI+U0lQQmV5b25kVm9JUEBsaXN0cy5hZy1wcm9qZWN0cy5jb208QlI+aHR0cHM6Ly9saXN0cy5hZy1wcm9qZWN0cy5jb20vbWFpbG1hbi9saXN0aW5mby9zaXBiZXlvbmR2b2lwPEJSPjwvaWZyYW1lLWNvbnRlbnQ+"></iframe></div></div></div></blockquote></div><br class=""></div></body></html>