April 9, 2013
11:55 p.m.
Hi all,
My name is Marcos Chavarría and I'm a fourth year computer science student from Galicia, Spain. I'm interested in the OpenPGP integration project for this year SoC. I have experience working with python in several university projects and I have some knowledge about crypto primitives (I made Coursera Cryptography course[1]).
The problem is that I'm not sure if I understand the idea. This is how I see it:
- Users summit their public key to MailMan server when they register to mail list.
- The user can get MailMan Server public key
- When an user want to post a message they both sign and encrypt this message. They encrypt the message using MailMan public key. Then the message is sent to MailMan Server.
- MailMan decrypt the received message and check if the sign is correct (with the stored public user public key). If the sign is correct, it sends a message to every mail-list subscripter encrypted with each user public key.
- The other user receive the email and decrypt it.
Is this correct?
Best Regards, Marcos Chavarría