httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Arturo 'Buanzo' Busleiman <>
Subject Introducing mod_openpgp
Date Thu, 19 Jul 2007 13:00:37 GMT
Hash: SHA512

Dear people at httpd-dev,

My name is Buanzo, and I'm developing an IETF draft regarding OpenPGP Extensions to the HTTP
Protocol. So far I've implemented HTTP-request signing, and an interesting session protocol
(for web
application's login, via a contribution of Kyle Huff from

The concept implementation current consists of two software pieces:

	* A Mozilla Firefox Addon called "Enigform"
	* An Apache module called "mod_auth_openpgp" (soon to be renamed mod_openpgp)

All OpenPGP tasks use GnuPG and GPGME where applicable.

For a simple explanation of how signed http requests work, you can check out - The article includes links to m_a_o and enigform.
You can
also visit the Forums at

Currently I am in the process of implementing the Apache side of OpenPGP-Encrypted HTTP Requests,
adding an input filter to m_a_o, as the rest of the functionality is so far implemented using
couple of handlers (for PGP-Key importing and OpenPGP support discovery) and some standard
post-read-request hooks.

My aim is to contribute mod_openpgp to the Apache Software Foundation, and that's why I've
subscribed to this mailing list.

I have some questions regarding how to properly implement this functionality into the Apache
and I believe this to be closer to httpd-dev than modules-dev (although I've been there since
first started mod_openpgp, OpenPGP request/response encryption should definitely be httpd-dev

I will not started with questions right now, but I'll politely wait for your questions, if
you have
any, so I do not disturb the list :)

Happy to be here,

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
SHOW DE FUTURABANDA - Sabado 18 de Agosto 2007 (Speed King, Capital Federal)
Entradas anticipadas a traves de - Punk Rock Melodico

Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla -


View raw message