RFC6091 support

[singpolyma]

If support were to be added for http://www.ietf.org/rfc/rfc6091.txt, what would be right right way to do it? I expect at least some changes would have to be made in this package, though it would be reasonable to put as much as possible in a separate module.

[vincenthz]

Clint Adams is working on the exact same thing, i.e. adding gpg support to TLS, you guys should talk together. I wanted to add support for gpg too, but didn't so far as i lack time, but hopefully it means that things should be easy to integrate.

There should only be a bit of extension code to parse and produce the new certificate format and some logic to let user enable/disable the gpg support.

[singpolyma]

If it helps, I have https://github.com/singpolyma/openpgp-haskell, which is a fairly (but not totally) complete Data.Binary based OpenPGP packet parser.

How would I get in touch with Clint?

[vincenthz]

I think the easiest is [email protected]. Clint made some modules to handle openpgp structure too btw (uploaded as hopenpgp on hackage). I didn't know of your effort (and i suspect clint neither) to add openpgp support.

[mignon-p]

If you're not already aware of it, there's some discussion of the future of OpenPGP certificates happening on the TLS and GnuTLS mailing lists:

http://www.ietf.org/mail-archive/web/tls/current/msg09023.html
http://lists.gnu.org/archive/html/help-gnutls/2012-11/msg00001.html

You guys might want to speak up, if you are actively using RFC 6091.

[vincenthz]

hm, it seems a bit unfortunate. we don't have any code for pgp certificates yet (AFAIK), and it looks like the pgp extension is barely used indeed :(