Advertisement
Guest User

concept for signed post list

a guest
Oct 26th, 2013
132
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.43 KB | None | 0 0
  1. [Imagine this is an HTML page.]
  2.  
  3. My PGP key is:
  4. Crypto details: this key length, this algorithm, etc. Optional link to tools page.
  5. List of those who signed my key: link here.
  6.  
  7. List of signed posts, comments or other activities that are public follows.
  8.  
  9. Category: Schneier blog comment
  10. Timestamp:
  11. URL: https://www.schneier.com/blog/archives/2013/10/friday_squid_bl_396.html#c2057561
  12. Message text (or hash) here:
  13. Signature here:
  14.  
  15. Paragraph Break
  16.  
  17. Category: Personal Blog Post
  18. Timestamp:
  19. URL:
  20. Message text (or hash):
  21. Signature:
  22.  
  23. END OF LIST
  24.  
  25. Notice that, if it's from airgapped machine, you can always resign them with new keys or tech. You can produce the whole page from a machine readable list (eg JSON) on that machine. Further, you don't even have to sign individual posts: you can sign the whole list as a text file with both the file and signature available for download on the HTML page. Another proposal I gave Bruce a while back that blogs should just sign the BODY tag's contents and put the signature in as an HTML meta tag or comment or something. That way, it's viewable on all devices and a simple script/plugin could check authenticity. No SSL required. ;) You could do that on the page that lists the comments/posts. Many possibilities. I think linking to a signature on your blog takes the least space on others, provides you with ability to give valuable info, and the signed .txt file method might suit your setup best.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement