[Tickets #5753] Re: Minimize lacking PGP forward secrecy with webmail

[bugs at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=5753
-----------------------------------------------------------------------
 Ticket             | 5753
 Updated By         | horde at immerda.ch
 Summary            | Minimize lacking PGP forward secrecy with webmail
 Queue              | Horde Base
 Version            | 3.1.4
 Type               | Enhancement
 State              | Accepted
 Priority           | 2. Medium
 Owners             | 
-----------------------------------------------------------------------


horde at immerda.ch (2007-09-29 07:16) wrote:

> Seems to me like if people use Horde to generate their key they 
> should be able to download it at least at that specific time to back 
> it up - and to get a warning then about losing it, etc. But otherwise 
> this seems reasonable to me. Any other thoughts/objections?

the idea with the only download possibility while generating is great.
However it might be as well a good idea to give the possibility to
view/download a revocation certificate and/or send  one to a keyserver
(like you can do it with your public key). otherwise there might be the
problem that people want to generate a new key, but can't revoke the old
one.