Re: handling private keys

Radu Spineanu wrote: > In case anyone has some experience, is it hard to write such a symbian > application ? Being more specific, porting gpg to symbian. I noticed an implementation of pgp: http://my-symbian.com/9210/applications/applications.php?faq=5&fldAuto=336 Radu -- To U

Re: handling private keys

Edward Faulkner wrote: > It would be pretty cool to use a PDA as a trusted device - it would > download a document from the PC, ask you to verify it, then sign it > and send it back. It's even better than a smart card, because you can > use the PDA's display to verify that you're signing what you

Re: handling private keys

Edward Faulkner wrote: > As to your question, once someone roots your box all bets are off. If > you're really paranoid about these keys, keep them on a dedicated > machine that's extremely locked down. Or even a machine with no > network at all, and move data back and forth on a usb drive. > I

handling private keys

Hello I working on a small project, and i have a problem related to keeping gpg private keys stored on usb drives secure when working with them. My problem is that in case the machine is compromised, if the usb with the key is mounted the attacker has access to it. Has anyone heard of an impleme

Re: which pop3/imap secure method should I use?

Ian Eure wrote: >> On Monday 13 June 2005 04:41 pm, LeVA wrote: >> I don't see why it would be helpful, unless you're trying to keep your info >> secret from a determined/resourceful attacker. But an attacker like that >> would probably get it anyways. >> >> I use TLS & PLAIN, and encrypt/sign my m

Re: [SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities

Rhesa Rozendaal wrote: . My advice would be to _not_ add the LoadModule line to the apache config: if this security update needs installing, it is very likely that SSL is already configured correctly. At the very least, make it a question that I can answer yes or no to. Perhaps a better solutio