monkeysign issueshttps://0xacab.org/monkeysphere/monkeysign/-/issues2017-04-06T18:50:01Zhttps://0xacab.org/monkeysphere/monkeysign/-/issues/46From: of mail gets set to $user@localhost2017-04-06T18:50:01ZgeorgFrom: of mail gets set to $user@localhostAs discussed in #39, on my machine the `From:` gets set to `georg@localhost`. The `uid` of the key looks fairly standard:
```gpg --list-keys georg@riseup.net | grep uid
uid georg@riseup.net <georg@riseup.net>```
Shoul...As discussed in #39, on my machine the `From:` gets set to `georg@localhost`. The `uid` of the key looks fairly standard:
```gpg --list-keys georg@riseup.net | grep uid
uid georg@riseup.net <georg@riseup.net>```
Should I try to debug this further?Monkeysign 2.3.0https://0xacab.org/monkeysphere/monkeysign/-/issues/41make preferences window user friendly2017-04-06T18:50:00Zanarcatmake preferences window user friendlyThe current preferences window is incredibly ugly and basically unusable for the average monkey. It works, but it's more a prototype than anything functional.
Some UI design would improve it a lot. Right now, we just suck in all options...The current preferences window is incredibly ugly and basically unusable for the average monkey. It works, but it's more a prototype than anything functional.
Some UI design would improve it a lot. Right now, we just suck in all options from the commandline config, that's not so great. We could affort to hardcode options in there and create a better design.
This is a followup to #20.Monkeysign 2.3.0simonftsimonfthttps://0xacab.org/monkeysphere/monkeysign/-/issues/26wizard? add explanations on what will happen2018-02-15T09:52:05ZJerome Charaouiwizard? add explanations on what will happen*Imported from bugseverywhere, created on 2013-10-20**Imported from bugseverywhere, created on 2013-10-20*Monkeysign 3.0.0https://0xacab.org/monkeysphere/monkeysign/-/issues/22merge with python-gnupg2018-02-15T09:52:05ZJerome Charaouimerge with python-gnupg*Imported from bugseverywhere, created on 2013-10-20**Imported from bugseverywhere, created on 2013-10-20*Monkeysign 3.0.0https://0xacab.org/monkeysphere/monkeysign/-/issues/6consider local key exchange mechanisms (geysigning, safeslinger)2018-02-15T09:52:05Zanarcatconsider local key exchange mechanisms (geysigning, safeslinger)The [geysigning project](https://github.com/muelli/geysigning), which reuses (and improves on!) parts of the Monkeysign code, introduces a novel idea of *not* depending on the keyservers to fetch the public key material before signing. T...The [geysigning project](https://github.com/muelli/geysigning), which reuses (and improves on!) parts of the Monkeysign code, introduces a novel idea of *not* depending on the keyservers to fetch the public key material before signing. To quote their README file:
> In contrast to caff or monkeysign, this tool enables you to sign a key without contacting a key server. It downloads an authenticated copy of the key from the other party. For now, the key is authenticated by its fingerprint which is securely transferred via a QR code. Alternatively, the user may type the fingerprint manually, assuming that it has been transferred securely via the audible channel.
I haven't figured out exactly *how* the key material is copied - it is presumably done through some Avahi protocol?
OpenKeychain has its own way of doing those transfers, which are implemented as a multi-party "keysigning party" protocol of some sort. It uses an app called [SafeSligner](https://www.cylab.cmu.edu/safeslinger/) for which there is a [Python library](https://github.com/SafeSlingerProject/exchange-python-web) we could reuse as well.
List of possible implementations:
* [geysigning][geysigning project] - homegrown avahi + httpserver
* [SafeSlinger][] - custom protocol?
* [FlyWeb](https://flyweb.github.io/posts/2016/11/01/introducing-flyweb.html) - standardized web-based avahi + httpserver?Monkeysign 3.0.0https://0xacab.org/monkeysphere/monkeysign/-/issues/27merge the signing prompts2018-02-15T09:52:05ZJerome Charaouimerge the signing prompts*Imported from bugseverywhere, created on 2013-10-20**Imported from bugseverywhere, created on 2013-10-20*