feature request: allowing display of session key used

[vedaal at hush.com]

>Message: 1
>Date: Wed, 10 Dec 2003 17:24:30 -0500
>From: David Shaw <dshaw at jabberwocky.com>

>On Wed, Dec 10, 2003 at 02:11:33PM -0800, vedaal at hush.com wrote:
>> would it be possible to have an option to allow for displaying
>the session
>> key that is being used during encryption?

>Is this not --show-session-key ?

no,

the --show-session-key works only upon decrypting

i'm asking for an extension of it,
 to also allow the session key to be displayed as it is being used to
encrypt

[...]

>Message: 6
>Date: Thu, 11 Dec 2003 00:29:14 +0100
>From: Ingo Kl?cker <ingo.kloecker at epost.de>
>--throw-keyid ? Sure it throws away the key id of all encryption
>keys. 
>But if you want anonymity then that's what you want to use because
>you 
>won't have to keep track of any session keys.

agreed,
definitely a great option,
have been trying for a long time to get pgp to use it,

even developed a workaround for having pgp users to be able to
decrypt throw keyid messages:

http://www.angelfire.com/pr/pgpf/tkidpgpwa.html

(but, for dh keys, it needs someone using gnupg to encrypt a message
first, and send the message to a pgp user to have a reference of the
the dh keyid)

so, meanwhile,
would still like to ask for the extension of the show session key feature

[...]

>Message: 7
>Date: Wed, 10 Dec 2003 19:33:01 -0500
>From: David Shaw <dshaw at jabberwocky.com>
have to keep track of any session keys.
>
>In 1.3.x you can do -r for regular recipients,, and -R for hidden
>recipients, and mix them however you please.

absolutely,
have been eagerly waiting for it's inclusion into the 1.2.x releases
;-)

but would 'still' like to request the extended show session key feature:


even using the throw key-id feature, it still shows that it was encrypted
to a second (or more) persons

with the extended show session key,
it can be encrypted to only the recipient,

and this provides a greater degree of anonymity and plausible deniability.


with Respect,

vedaal




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427