existing keys as subkey

Ingo Klöcker ingo.kloecker@epost.de
Thu Oct 3 11:57:02 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 03 October 2002 01:27, 1984 wrote:
> Hello,
> I want to install a pgp/gpg secured mailinglist. The best possibility
> is to generate a new key, includes every key of the entered users.
> Every mail to the list must be encrypted with this public key.
> My question is: how can I build a key and implement other existing
> keys as subkeys of this one? So that every mail encrypted by the key
> is encrypted by the keys of all users.
>
> The only way, I think, is to use ADK of PGP, because in GnuPG you
> cannot take existing keys as a subkey, you can only generate a new
> one.

All you have to do is generate a new key which is used to encrypt 
messages which are sent by the subscribers to the mailinglist and which 
is used to sign the subscribers' keys.

This is how the encrypted mailinglist works:
When someone what's to sent a message to the mailinglist he encrypts the 
message with the mailinglist key.
The mailinglist manager receives the message, decrypts it, re-encrypts 
it for all subscribers and then sends it to the subscribers. In order 
to protect the privacy of the subscribers the message should be 
encrypted for each subscriber separately.

BTW, you have to handle at least two cases. Old-skool inline encrypted 
messages and PGP/MIME encrypted messages.

Regards,
Ingo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE9nBK+GnR+RTDgudgRAiqgAKDb35awaQrgzRzZWT/grE5qLsBb6ACfV/VI
rKdTOe5ddLIXqKJE4Sl/nZs=
=8bMI
-----END PGP SIGNATURE-----