Key signing policy

2005-09-04 Thread Cameron Metzke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Does anyone have solid written key signing policy? I ask because i was just asked myself, and just gave a rough verbal of my own policy. But i would like to see any others before i commit myself to anything on paper. (I'm Trying To Push For GnuPG To Be

Re: Expired Keys

2005-09-04 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cameron Metzke wrote: > > Well thats a great bash script which i will incorperate into my *nix box > :). > Basically what im trying to do is build a php frontend to gnupg which > can act like a keyserver. The keys are imported using --fast-import > wh

Re: Expired Keys

2005-09-04 Thread Cameron Metzke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Neil Williams wrote: > On Sunday 04 September 2005 11:31 pm, Cameron Metzke wrote: > >>Basically what im trying to do is build a php frontend to gnupg which >>can act like a keyserver. > > > But then keyservers don't delete keys - expired or not. >

Re: Expired Keys

2005-09-04 Thread Neil Williams
On Sunday 04 September 2005 11:31 pm, Cameron Metzke wrote: > Basically what im trying to do is build a php frontend to gnupg which > can act like a keyserver. But then keyservers don't delete keys - expired or not. Think about it, when I use a keyserver, I still want to be able to retrieve an e

Multiple signing - is this a common desire? (was Re: Signing MS-Excel spread sheets)

2005-09-04 Thread Kurt Fitzner
Berend Tober wrote: > Anyway, I've looked at WinPT and GPGee and one other GUI wrapper > around gnupg, but they all of course are victims of this MS Excel > "feature", and furthermore none of them satisfy my other need to be > able to support multiple persons signing any given document When I s

Re: Expired Keys

2005-09-04 Thread Cameron Metzke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Neil Williams wrote: > On Sunday 04 September 2005 9:20 pm, Cameron Metzke wrote: > >>Hi, > > > Message was signed on 01/01/1970 12:59 am with unknown key 0x68312280. > The validity of the signature cannot be verified. > gpgkeys: key 889282586831228

Re: Expired Keys

2005-09-04 Thread Cameron Metzke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Neil Williams wrote: > On Sunday 04 September 2005 9:20 pm, Cameron Metzke wrote: > >>Hi, > > > Message was signed on 01/01/1970 12:59 am with unknown key 0x68312280. > The validity of the signature cannot be verified. > gpgkeys: key 889282586831228

Re: Expired Keys

2005-09-04 Thread Neil Williams
On Sunday 04 September 2005 9:20 pm, Cameron Metzke wrote: > Hi, Message was signed on 01/01/1970 12:59 am with unknown key 0x68312280. The validity of the signature cannot be verified. gpgkeys: key 8892825868312280 not found on keyserver If you are going to sign emails, PLEASE make sure your key

Expired Keys

2005-09-04 Thread Cameron Metzke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Is there any command that will delete expired keys from a keyring ? I have had a look through the docs but cant seem to find anything, so i thought i would ask the guru's :) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) iD8DBQFDG1c

Re: Signing MS-Excel spread sheets

2005-09-04 Thread Berend Tober
Peter Pentchev wrote: On Fri, Sep 02, 2005 at 10:39:52PM -0400, Dan Mundy wrote: Berend Tober wrote: I hate to admit that I still use MS-Excel rather than an open source spread sheet tool, but workplace requirements constrain my fate... Has anyone else managed a work-around for this fl

Re: Transparent keyboards

2005-09-04 Thread Anders Breindahl
On Sunday 04 September 2005 14:48, Jean-David Beyer wrote: > Jean-David Beyer wrote: > > Oskar L. wrote: > >>>[EMAIL PROTECTED] wrote: > >>>I choose to live alone (for security reasons) so what I worry most about > >>>are keyloggers and microphones. Here in Finland the police have a > >>> special g

Re: GPGol released

2005-09-04 Thread Werner Koch
On Sun, 04 Sep 2005 13:42:45 +0200, Werner Koch said: > directory where Windows searches for DLLs (e.g. c:\winnt\system32), > stop Outlook, run the command "regsvr32 outlgpg.dll" and start Small bug: Run regsvr32 gpgol.dll and not outlgpg.dll (which was the old name of the DLL). Shalom-S

Re: Signing MS-Excel spread sheets

2005-09-04 Thread Peter Pentchev
On Fri, Sep 02, 2005 at 10:39:52PM -0400, Dan Mundy wrote: > Berend Tober wrote: > > I hate to admit that I still use MS-Excel rather than an open source > > spread sheet tool, but workplace requirements constrain my fate... > > Has anyone else managed a work-around for this flaw? (Aside from the >

Re: Transparent keyboards

2005-09-04 Thread Benjamin Donnachie
Jean-David Beyer <[EMAIL PROTECTED]> wrote: >My guess is that if someone serious about this, such as a large government >agency, were to do it, they might do something really simple, like replace >some board in your machine (modem?) with another one just like it but with >the keylogger on it. See

Re: Transparent keyboards

2005-09-04 Thread Greg Sabino Mullane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Once a computer or other device that needs secure access is sufficiently > protected, it becomes cheaper for a large government agency to resort to > bribery or torture to get the information it wants. Assuming they do not > wish to try bribery, ar

Re: Transparent keyboards

2005-09-04 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jean-David Beyer wrote: > Oskar L. wrote: > >>>[EMAIL PROTECTED] wrote: >>> >>> >>> I don't know of any transparent keyboards off-hand (I can check our local computer store tomorrow, since they have one there). >>> >>> >>>Thanks! >>> >>> >>>

Re: Transparent keyboards

2005-09-04 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Oskar L. wrote: > [EMAIL PROTECTED] wrote: > > >> I don't know of any transparent keyboards off-hand (I can check our >> local computer store tomorrow, since they have one there). > > > Thanks! > > >> But, I will say this. There is a keylogger

Re: Transparent keyboards

2005-09-04 Thread Oskar L.
[EMAIL PROTECTED] wrote: > I don't know of any transparent keyboards off-hand (I can check our > local computer store tomorrow, since they have one there). Thanks! > But, I will > say this. There is a keylogger out that goes between the keyboard plug > and the case. There are several, see http

GPGol released

2005-09-04 Thread Werner Koch
Hi, I have just released a first version of GPGol, the new GPG plugin for MS Outlook. The intention is to replace the old G-DATA plugin by more modern code. We basically rewrote it from scratch and thus a lot of bugs are to be expected. Successful tests have only be done with Outlook 2003 and t

Re: Transparent keyboards

2005-09-04 Thread Patrick Dickey
Oskar L. wrote: >"Neil Williams" <[EMAIL PROTECTED]> wrote: > > > >>What makes you think a keylogger goes 'inside' a keyboard? The cable >>connection is just as easy and an internal unit (on the inside of the >>socket on the box) even better. >> >> > >I keep my case open, so I would notice t

Re: Transparent keyboards

2005-09-04 Thread Oskar L.
"Neil Williams" <[EMAIL PROTECTED]> wrote: > What makes you think a keylogger goes 'inside' a keyboard? The cable > connection is just as easy and an internal unit (on the inside of the > socket on the box) even better. I keep my case open, so I would notice that. There enough space for a keylogg

Re: GnuPG Large File Issues - Windows

2005-09-04 Thread Werner Koch
On Sat, 3 Sep 2005 10:02:31 -0400, Jeffrey Tadlock said: > Am I typing something wrong? Here is what I typed: > gpg --encrypt-files -r "System Administrator" -z 0 < sql-db.bak > sql-db.gpg Sorry, I missed that you are using --encrypt-files. This command is deifferent to --encrypt in that it ta

Re: Transparent keyboards

2005-09-04 Thread Neil Williams
On Sunday 04 September 2005 1:29 am, Oskar L. wrote: > Can anyone recommend a transparent keyboard, or any kind of keyboard witch > makes it easy to check that a keylogger has not been installed inside What makes you think a keylogger goes 'inside' a keyboard? The cable connection is just as easy