diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 31 |
1 files changed, 12 insertions, 19 deletions
@@ -38,7 +38,7 @@ pinned/trusted connection that cannot present a verifiable certificate. It can expose account credentials and article traffic to a man-in-the-middle and should not be enabled on an untrusted network. -## Identity and message cryptography +## Identity and message signing The posting profile is VFace-compatible but optional for publishing. Its username, email address, and canonical Ed25519 public key are joined as @@ -53,26 +53,19 @@ hash of the PNG, and the verification link `AEGIS_IDENTICON_CLI` path and other standard locations. The executable must return a 48x48 PNG as base64. Aegis does not embed the identicon GUI. -Age is the software encryption format. OpenPGP is not exposed as a standalone -software format: it is reserved for the YubiKey OpenPGP integration. The -optional VFace profile generates an Ed25519 identity and stores it in an +The optional VFace profile generates an Ed25519 identity and stores it in an age-encrypted local vault protected by a user password of at least 12 -characters. +characters. Age protects the local profile vault only, not Usenet messages. The composer keeps the classic Usenet path as the default. It sends RFC 5322 and MIME-compatible text articles directly to NNTP, with UTF-8 `8bit` text, -canonical CRLF line endings, and a generated `Message-ID`. Optional composer -modes can sign the canonical body with an Ed25519 key, encrypt the body with -age (native X25519 or SSH Ed25519/RSA recipients), or do both. These modes add -`X-Aegis-*` metadata, -including the inline verification key, its SHA-256 fingerprint, and an -optional HTTPS key URL. The URL is metadata only and is never fetched -automatically. - -Ed25519 is used for signatures, not encryption. The age recipient must be an -encryption key, and private keys are supplied for the current operation only. -The optional SURB integration remains a separate future task and is not part -of classic Usenet posting. +canonical CRLF line endings, and a generated `Message-ID`. The composer +supports classic plaintext and optional Ed25519 signing. Signed posts add +`X-Aegis-*` metadata, including the inline verification key and its SHA-256 +fingerprint. + +Ed25519 is used for signatures only. Message encryption and SURB integration +remain separate future work and are not part of classic Usenet posting. TLS connections require TLS 1.2 or 1.3. For TLS 1.2, Aegis offers only ECDHE-AES-GCM suites. Go does not expose TLS 1.3 cipher-suite selection, so a @@ -89,8 +82,8 @@ TLS 1.2. - posting creates MIME 1.0 text articles with UTF-8 and `8bit` by default; attachment file selection remains pending; article lines are validated at a maximum of 998 octets and sent with canonical CRLF line endings; -- composer supports age and optional VFace Ed25519 signing; OpenPGP remains - reserved for the YubiKey integration; +- composer supports plaintext and optional VFace Ed25519 signing; YubiKey + support is limited to signing and verification; - SMTP mail2news delivery supports cleartext, implicit TLS or STARTTLS. It reuses the single NNTP proxy configuration, and SOCKS5 routing is required for `.onion` hosts; the SMTP password is session-only; |