httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Arturo 'Buanzo' Busleiman <bua...@buanzo.com.ar>
Subject Introducing mod_openpgp
Date Thu, 19 Jul 2007 13:00:37 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear people at httpd-dev,

My name is Buanzo, and I'm developing an IETF draft regarding OpenPGP Extensions to the HTTP
Protocol. So far I've implemented HTTP-request signing, and an interesting session protocol
(for web
application's login, via a contribution of Kyle Huff from www.gpgauth.com).

The concept implementation current consists of two software pieces:

	* A Mozilla Firefox Addon called "Enigform"
	* An Apache module called "mod_auth_openpgp" (soon to be renamed mod_openpgp)

All OpenPGP tasks use GnuPG and GPGME where applicable.

For a simple explanation of how signed http requests work, you can check out
http://freshmeat.net/articles/view/2599 - The article includes links to m_a_o and enigform.
You can
also visit the Forums at http://foros.buanzo.com.ar/viewforum.php?f=35

Currently I am in the process of implementing the Apache side of OpenPGP-Encrypted HTTP Requests,
by
adding an input filter to m_a_o, as the rest of the functionality is so far implemented using
a
couple of handlers (for PGP-Key importing and OpenPGP support discovery) and some standard
post-read-request hooks.

My aim is to contribute mod_openpgp to the Apache Software Foundation, and that's why I've
subscribed to this mailing list.

I have some questions regarding how to properly implement this functionality into the Apache
httpd,
and I believe this to be closer to httpd-dev than modules-dev (although I've been there since
I
first started mod_openpgp, OpenPGP request/response encryption should definitely be httpd-dev
assisted).

I will not started with questions right now, but I'll politely wait for your questions, if
you have
any, so I do not disturb the list :)

Happy to be here,
Buanzo.

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
SHOW DE FUTURABANDA - Sabado 18 de Agosto 2007 (Speed King, Capital Federal)
Entradas anticipadas a traves de www.futurabanda.com.ar - Punk Rock Melodico


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGn2B1AlpOsGhXcE0RCslmAJ9Era3KzN8qGqT2mvF/SxkcKLXO6wCfWuyK
qXWOPdaJccM0LcG1h+dpT3Q=
=dpa2
-----END PGP SIGNATURE-----

Mime
View raw message