On Samstag, 29. Januar 2022 17:38:24 CET jonkomer via Gnupg-users wrote: > Posting the question was worthwhile, as I have learned > that: > > (a) Unfortunately, OpenPG email encryption is incompatible > with GDPR and should not be used by those that either want > or need to be GDPR compliant.
I disagree with this conclusion. For example, you could use OpenPGP keys with pseudonymous user ids or even with identical user ids. Obviously, this would make using OpenPGP more difficult because the email clients couldn't easily map OpenPGP keys to email addresses. OTOH, some email clients actually support mapping of OpenPGP keys to contacts. Maybe even the company's internal address book could be used for this. This way uploading those OpenPGP keys to keyservers wouldn't leak email addresses. Arguably, the OpenPGP keys themselves could still be considered as person identifiable information. In this case, you might want to use symmetric encryption (which OpenPGP also supports). But that makes using encryption even more difficult because now you have to share the passwords used for symmetric encryption and, at the same time, make sure that those passwords are kept secret. > (b) GDPR appears to be a topic that, for some strange reason, > elicits emotional reactions by the OpenPG creators and > maintainers. I don't know who you mean by "the OpenPGP creators and maintainers". Neither Phil Zimmermann, the original author of PGP, nor Werner Koch, the original author and maintainer of GnuPG, have participated in this thread. OTOH, some people who have replied to you are also on the mailing list where the future of the OpenPGP standard is discussed. > (c) GPG and OpenPG appear to be very much US-centric > endevours. That fact ought to be taken into account by the > new users. I find it ironic that you are accusing GnuPG of being a US-centric endeavor. You really need to do some more research before jumping to such absurd conclusions. Regards, Ingo
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users
