Re: "--for-your-eyes-only"

2005-06-28 Thread Shatadal
Johan Wevers wrote: > Jean-David Beyer wrote: > > >>I do not see how it would be possible to stop the reader (i.e., the person, >>not the program) from copying and pasting that decrypted email; > > > It isn't. And if all else fails he can still write it down by hand. It's > considerd more like

Re: "--for-your-eyes-only"

2005-06-28 Thread Johan Wevers
Werner Koch wrote: >There is just one caveat: [...] >| http://www.cl.cam.ac.uk/~mgk25/st-fonts.zip >Where this - but only this - shouldn't be a problem even if the EU >continues to ignore the will of its citizens and national parliaments >in next week's parliament reading on software patent.

Re: Equivalent to option -f ?

2005-06-28 Thread Werner Koch
On Thu, 23 Jun 2005 17:40:36 +0200, Konrad Mathieu said: > I have to adapt a shell script to work with GPG instead of PGP and it > contains the -f option for acting like a filter. Actually, There is no need for such an option because gpg, being a good Unix citizen, does this by default. > the f

gpg --symmetric with same passphrases

2005-06-28 Thread Xuân Baldauf
Hello, is it secure to use for different files, to be encrypted using "gpg --symmetric", the same passphrase? Or does this pose a risk of a cryptographic attack which would not exist if different passphrases were used? Background: There are multiple notebook computers whose each root filesy

Re: "--for-your-eyes-only"

2005-06-28 Thread Karl Hasselström
On 2005-06-28 13:44:19 +0200, Johan Wevers wrote: > Jean-David Beyer wrote: > > > I do not see how it would be possible to stop the reader (i.e., > > the person, not the program) from copying and pasting that > > decrypted email; > > It isn't. And if all else fails he can still write it down by ha

Equivalent to option -f ?

2005-06-28 Thread Konrad Mathieu
Hi, my name is Konrad and I am completely new to this list. I have to adapt a shell script to work with GPG instead of PGP and it contains the -f option for acting like a filter. Actually, the full command is: pgp -f -ea rvsdata How do I make gpg behave exactly the same? Thanks and cheers, Kon

Re: pinpad cardreader; imported smart-card keys

2005-06-28 Thread Werner Koch
On Tue, 28 Jun 2005 10:35:58 -0500, Alex Mauer said: > As I was afraid of; perhaps the howto could be updated to clarify that We will do this. >> The longer answer is that I have worked on it and added code to the >> CCID driver to check this out. > How about the SC daemon? Its the same code

Re: HTTP keyserver creation.

2005-06-28 Thread Jason Harris
On Tue, Jun 28, 2005 at 04:00:54PM +0500, Victor Harutyunyan wrote: > I have installed gnupg-1.4.1 and apache_1.3.3. > How can I configure HTTP keyserver? Try SKS: http://www.nongnu.org/sks/ (Victor appears to be using Debian; can someone point him to a/the packaged version?) -- Jason Har

Re: pinpad cardreader; imported smart-card keys

2005-06-28 Thread Alex Mauer
Werner Koch wrote: > As of now the "may be" means with software supporting it but not with > GnuPG :-(. As I was afraid of; perhaps the howto could be updated to clarify that > > The longer answer is that I have worked on it and added code to the > CCID driver to check this out. How about the

Re: "--for-your-eyes-only"

2005-06-28 Thread Werner Koch
On Tue, 28 Jun 2005 11:16:00 +0200 (MET DST), Johan Wevers said: > Which makes me think... outputting the text to a .jpg (or .gif or .png) > with secure fonts shown in the picture. The picture could then be looked > at in an external vieuwer. That would be completely portable. Actually a neat ide

Re: "--for-your-eyes-only"

2005-06-28 Thread Werner Koch
On Tue, 28 Jun 2005 04:58:52 -0400, Charly Avital said: > I may not understand what you mean by "portable". > I suppose that a secure viewer (software program) could not be nearly > ported to GnuPG? GnuPG is a command line tyool which only manges text input and output and as such it is pretty por

HTTP keyserver creation.

2005-06-28 Thread Victor Harutyunyan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I have installed gnupg-1.4.1 and apache_1.3.3. How can I configure HTTP keyserver? Regards, Victor. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQ

Re: "--for-your-eyes-only"

2005-06-28 Thread Johan Wevers
Jean-David Beyer wrote: >I do not see how it would be possible to stop the reader (i.e., the person, >not the program) from copying and pasting that decrypted email; It isn't. And if all else fails he can still write it down by hand. It's considerd more like a hint, not as a 100% secure thing. An

Re: "--for-your-eyes-only"

2005-06-28 Thread Johan Wevers
David Shaw wrote: >is a command line application, and you can't really make a secure >viewer on the command line, and by its nature a secure viewer would >not be nearly portable enough. [...] >However, GnuPG can call other programs to do other tasks (keyserver >access programs, JPEG viewers for

Re: "--for-your-eyes-only"

2005-06-28 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Shaw wrote: > On Mon, Jun 27, 2005 at 11:16:47AM +, Charly Avital wrote: > > >> when a message processed ... is decrypted using GnuPG (e.g. by command >> line) the verbose gpg output contains a line reading: gpg: NOTE: sender >> requested "

Re: "--for-your-eyes-only"

2005-06-28 Thread Charly Avital
David Shaw wrote the following on 6/27/05 11:18 PM: [...] > If I understand your question, > no, there is no secure viewer built > into GnuPG. There are many reasons, but two good ones are that GnuPG > is a command line application, and you can't really make a secure > viewer on the command line

Re: pinpad cardreader; imported smart-card keys

2005-06-28 Thread Werner Koch
On Mon, 27 Jun 2005 16:30:15 -0500, Alex Mauer said: > I purchased an SCM SPR332 card reader, based on the Smartcard Howto's > statement (about the SPR532) "The pinpad may be used to securely enter > the PIN". I have found that I cannot use the pinpad, at least not with As of now the "may be" me

Re: "--for-your-eyes-only"

2005-06-28 Thread Werner Koch
On Mon, 27 Jun 2005 23:18:26 -0400, David Shaw said: > However, GnuPG can call other programs to do other tasks (keyserver > access programs, JPEG viewers for photo IDs), so it's not impossible > that GnuPG could call an external secure viewer program. I don't know > of one offhand though. Nor d