Re: Bogus Key on Keyservers

2005-10-13 Thread Eric
On Thu, 2005-10-13 at 13:26 -0500, Tad Marko wrote: > If someone creates a key that LOOKS like I created it (my name and > email address) and uploads it to the keyservers, how can I either get > rid of it or somehow flag my own key in such a way that it is clear > which is the real one? You can't.

Re: Recommended keyserver

2005-10-13 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lares Moreau wrote: > Is there a recommended(read Endorsed) Keyserver? There is NO officially recommended or endorsed key server. > I'm looking at the documentation we have here at gentoo.org and it > recommends pgp.mit.edu. It has been suggested tha

Re: Lack of backwards compatability?

2005-10-13 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Was Thu, 13 Oct 2005, at 18:51:33 -0400, when John wrote: > It would be easier to confirm the sig if one had the Key or ability to > Import it. Agree wholeheartedly. If someone would ask me if I could agree More I couldn't say I could.

Re: Lack of backwards compatability?

2005-10-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It would be easier to confirm the sig if one had the Key or ability to Import it. JOHN :) Timestamp: Thursday 13 Oct 2005, 06:50 PM --400 (Eastern Daylight Time) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment: Public Key at:

Re: Lack of backwards compatability?

2005-10-13 Thread David Shaw
On Mon, Oct 10, 2005 at 09:09:59PM +0930, Alphax wrote: > Some old versions of GPG (1.0.x?) had support for the TIGER192 hash, but > this was later removed when it was dropped/rejected from the OpenPGP > standard. > > However, these versions of GPG (and possibly some versions of PGP as > well) are

Re: Lack of backwards compatability?

2005-10-13 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE- Hash: TIGER192 Was Mon, 10 Oct 2005, at 21:09:59 +0930, when Alphax wrote: > Some old versions of GPG (1.0.x?) had support for the TIGER192 hash, but > this was later removed when it was dropped/rejected from the OpenPGP > standard. > However, these ver

Re: Bogus Key on Keyservers

2005-10-13 Thread David Shaw
On Thu, Oct 13, 2005 at 01:26:15PM -0500, Tad Marko wrote: > If someone creates a key that LOOKS like I created it (my name and > email address) and uploads it to the keyservers, how can I either get > rid of it or somehow flag my own key in such a way that it is clear > which is the real one? If

Re: Bogus Key on Keyservers

2005-10-13 Thread Michael W. Lucas
On Thu, Oct 13, 2005 at 09:12:11PM +0100, Neil Williams wrote: > > or somehow flag my own key in such a way that it is clear > > which is the real one? > > Any change you make to your key could be mirrored by whoever created the > other > key. Use the fingerprint, that's what it is for. Signat

Re: Bogus Key on Keyservers

2005-10-13 Thread Neil Williams
On Thursday 13 October 2005 7:26 pm, Tad Marko wrote: > If someone creates a key that LOOKS like I created it (my name and > email address) and uploads it to the keyservers, how can I either get > rid of it You can't. You need to rely on the fingerprint - that is the only unique identifier for an

Re: Bogus Key on Keyservers

2005-10-13 Thread Lares Moreau
Key Fingerprint in Signature? (look Down) On Thu, 2005-10-13 at 13:26 -0500, Tad Marko wrote: > If someone creates a key that LOOKS like I created it (my name and > email address) and uploads it to the keyservers, how can I either get > rid of it or somehow flag my own key in such a way that it is

Bogus Key on Keyservers

2005-10-13 Thread Tad Marko
If someone creates a key that LOOKS like I created it (my name and email address) and uploads it to the keyservers, how can I either get rid of it or somehow flag my own key in such a way that it is clear which is the real one? Thanks, Tad ___ Gnupg-use

Re: Decryption doesn't work anymore

2005-10-13 Thread Niels Ringelmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks Charly, I tested already with a friend, that I also can't decrypt from third party. It didn't work. But I was so far lucky that I had stil an old backup of my key. But still I would be interested, what went wrong to avoid to make the same failu

Re: Recommended keyserver

2005-10-13 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Was Thu, 13 Oct 2005, at 09:30:16 -0600, when Lares wrote: > Is there a recommended(read Endorsed) Keyserver? I'm looking at the > documentation we have here at gentoo.org and it recommends > pgp.mit.edu. It has been suggested that this s

Re: Decryption doesn't work anymore

2005-10-13 Thread Charly Avital
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Niels, I have sent you directly an encrypted message, using the key you refer to, in your message to the list. I don't know what changes you may have done. But when I downloaded, a few minutes ago, your key from the keyservers, it was identical to

Re: Recommended keyserver

2005-10-13 Thread Neil Williams
On Thursday 13 October 2005 4:30 pm, Lares Moreau wrote: > Is there a recommended(read Endorsed) Keyserver? > I'm looking at the documentation we have here at gentoo.org and it > recommends pgp.mit.edu. It has been suggested that this server is old > and broken. Is this the case? Yes, it does not

Recommended keyserver

2005-10-13 Thread Lares Moreau
Is there a recommended(read Endorsed) Keyserver? I'm looking at the documentation we have here at gentoo.org and it recommends pgp.mit.edu. It has been suggested that this server is old and broken. Is this the case? Please advise. -- Lares Moreau <[EMAIL PROTECTED]> Gentoo x86 Arch Tester Pupli

Decryption doesn't work anymore

2005-10-13 Thread Niels Ringelmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi mailinglist members! Until today, I was working fine with GnuPG, but today after experimentaiotn with sub ids (and removing them again). I am no longer able to decrypt with my secret key, as you can see in the following example (unfortunatley, its