[gnutls-dev] OpenPGP security for web servers, again

[john at neggie.net]

I've always been frustrated with the lack of PGP support for HTTP.  Why, 
when the people I need to grant access to my web site all have PGP keys, do 
I have to deal with weak authentication schemes, forcing users to remember 
new passwords, and the poorly-designed X.509 system? 

I was surprised to find out that in 1995 the NCSA HTTP server and browser 
already had PGP support [1].  It was removed due to now-defunct export laws 
of the U.S. 

When will such functionality ever be returned to the most popular free HTTP 
server and browser?  It seems that with opencdk and the unique OpenPGP 
support in gnutls being under the GPL, we'll never see this support put into 
Apache.  Does the new Apache license change the situation? 

Regards,
 -John Belmonte 


 [1] http://hoohoo.ncsa.uiuc.edu/docs/PEMPGP.html