{"thread":{"id":"36439","subject":"user.signingkey without gpg? (using s/mime or ssh?)","startedAt":"2014-04-18T20:04:50Z","lastAt":"2014-04-18T21:44:08Z","messageCount":2,"participants":["Thomas Schittli","brian m. carlson"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"239080","messageId":"trinity-c71c6cb0-0c4f-4283-bca9-ae4aa0f3419c-1397851490695@3capp-gmx-bs08","threadId":"36439","inReplyTo":null,"subject":"user.signingkey without gpg? (using s/mime or ssh?)","fromName":"Thomas Schittli","fromEmail":"schittli@gmx.ch","sentAt":"2014-04-18T20:04:50Z","receivedAt":"2014-04-18T20:04:50Z","isPatch":false,"sender":{"key":"schittli@gmx.ch","avatar":null},"body":"\nDear Git Community\n \nI've spent almost a day to find an answer to this question:\n \nWe already have trusted Certificates from a CA. Can we use them instead of an additional PGP key?\nWe already have:\n- s/mime certificate\n- web server ssl/tls certificate\n- XMPP Jabber ssl/tls certificate\n- Object Code Signing certificate\n \nOr if we have to use a new pgp key: can we sign it using any of our certificates?\n \nThanks a lot for any hint in advance!,\nkind regards,\nThomas\n \n \n \n \n \n"},{"id":"239081","messageId":"20140418214408.GB57656@vauxhall.crustytoothpaste.net","threadId":"36439","inReplyTo":"trinity-c71c6cb0-0c4f-4283-bca9-ae4aa0f3419c-1397851490695@3capp-gmx-bs08","subject":"Re: user.signingkey without gpg? (using s/mime or ssh?)","fromName":"brian m. carlson","fromEmail":"sandals@crustytoothpaste.net","sentAt":"2014-04-18T21:44:08Z","receivedAt":"2014-04-18T21:44:08Z","isPatch":false,"sender":{"key":"sandals@crustytoothpaste.net","avatar":"https://avatars.githubusercontent.com/u/497054?v=4"},"body":"On Fri, Apr 18, 2014 at 10:04:50PM +0200, Thomas Schittli wrote:\n> We already have trusted Certificates from a CA. Can we use them\n> instead of an additional PGP key?\n\nGit wants a key that can be used by GnuPG, and X.509 certificates can't\nbe.  It invokes the gpg binary that's in your path, so X.509 integration\nisn't possible unless gpg learns about it.\n\n> We already have:\n> - s/mime certificate\n> - web server ssl/tls certificate\n> - XMPP Jabber ssl/tls certificate\n> - Object Code Signing certificate\n>  \n> Or if we have to use a new pgp key: can we sign it using any of our\n> certificates?\n\nOnly in the sense that you can sign any arbitrary piece of text or data\nwith your certificates.\n\n-- \nbrian m. carlson / brian with sandals: Houston, Texas, US\n+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only\nOpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187\n"}]}