Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread David Shaw
On Thu, Feb 23, 2006 at 01:04:10AM +0100, Walter Haidinger wrote: > On Wed, 22 Feb 2006, David Shaw wrote: > > Are you looking for a remote keyring? > > That's slightly different than a keyserver, or at least the thing > > that GnuPG calls a keyserver. > > Now that you mention it: acutally yes

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread Walter Haidinger
On Wed, 22 Feb 2006, David Shaw wrote: > It's a bit more complex than that - what LDAP (and any keyserver) does > is provide the key itself. That key is then imported and lives > locally from then on until it is deleted. There would need to be > cleanup after use or keys would be left behind.

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread David Shaw
On Wed, Feb 22, 2006 at 11:02:10AM +0100, Walter Haidinger wrote: > On Tue, 21 Feb 2006, David Shaw wrote: > > > > If GnuPG could also store secret keys (btw, can it? have never checked) > > > > It's theoretically possible, but no keyserver works that way. > > Probably not for HTTP keyservers, b

GPGOL - Error registering DLL

2006-02-22 Thread Paul Squires
Hi, I'm trying to install GPGOL for use with Outlook 2003 on Windows XP SP2. I've followed the instructions and am attempting to register the gpgol.dll file - getting the error message LoadLibrary("gpgol.dll")failed GetLastError returns 0x007e There's probably a few "non-standard" components

Re: Necessity of GPG when using SSL

2006-02-22 Thread Dany
Hello, I switched few years ago to fastmail.fm for several reasons : - https + advanced protections when accessing from public terminal (including url pseudo-scrambling) - IMAP with SSL - Text and only text for the webmail interface (no pop-up ad and no graphics), just plain speed - WebDAV (I don

GpgME: Compile under MinGW

2006-02-22 Thread Kiefer, Sascha
Hi, I downloaded the latest GpgME version and called configure. The last lines it outputes are: configure: WARNING: *** *** ttyname() is not thread-safe and ttyname_r() does not exist *** checking whether we are using the GNU C Library 2.1 or newer... no checking for getenv_r... no configure: WAR

Error handling OpenPGP card with a cyberjack pinpad

2006-02-22 Thread Peter Mikulas
Hello again! After reading the thread "OpenPGP card not available: Assuan server fault" my questions to the error messages generatet by gpg2 are obsolete. But when using gnupg-1.4.2.1 I'm still not able to do anything with the OpenPGP card. When I'm trying to e.g. change the PIN via gpg --cha

Error handling OpenPGP card with a cyberjack pinpad

2006-02-22 Thread Peter Mikulas
Hello! I'm unable the to change the PIN, generate a key,... on my OpenPGP card with a cyberjack pinpad smartcard reader (with 1.4.2.1 and 1.9.20). The error messages are: [EMAIL PROTECTED]:~$ gpg2 --card-status gpg: NOTE: THIS IS A DEVELOPMENT VERSION! gpg: It is only intended for test purpose

Error handling OpenPGP card with a cyberjack pinpad

2006-02-22 Thread Peter Mikulas
Hello! I'm unable the to change the PIN, generate a key,... on my OpenPGP card with a cyberjack pinpad smartcard reader (with 1.4.2.1 and 1.9.20). The error messages are: [EMAIL PROTECTED]:~$ gpg2 --card-status gpg: NOTE: THIS IS A DEVELOPMENT VERSION! gpg: It is only intended for test purpose

Re: Necessity of GPG when using SSL

2006-02-22 Thread Benjamin Esham
On Feb 22, 2006, at 6:22 AM, Janusz A. Urbanowicz wrote: And there is really no point in ecryptiong the whole access since the contents, the emails usually travel the rest of the net unencrypted. But wouldn't it be much easier for an attacker to intercept all of your e-mail by listening in on

Re: file encryption and integrity check

2006-02-22 Thread David Shaw
On Wed, Feb 22, 2006 at 05:49:40PM +1030, Alphax wrote: > Francesco Turco wrote: > > > i have disabled compression becouse files i have to encrypt are already > > compressed, and compression takes much more time then encryption. > > > > do you think it is a good choice? > > > > IIRC GnuPG will

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread Walter Haidinger
Alphax wrote: > Isn't this what Kerberos was designed for? No, Kerberos is only an authentication protocol. I'm talking about _storing_ secret keyrings on LDAP. What if you access your email by IMAP only? Each MUA with GnuPG support (e.g. Thunderbird with Enigmail plugin) could then use the publ

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread Alphax
Walter Haidinger wrote: > On Tue, 21 Feb 2006, David Shaw wrote: > > >>>If GnuPG could also store secret keys (btw, can it? have never checked) >> >>It's theoretically possible, but no keyserver works that way. > > > Probably not for HTTP keyservers, but for LDAP offering strong > authenticatio

Re: Necessity of GPG when using SSL

2006-02-22 Thread Janusz A. Urbanowicz
On Tue, Feb 21, 2006 at 07:52:26AM -0500, Henry Hertz Hobbit wrote: > Johan Wevers wrote: > > >Henry Hertz Hobbit wrote: > > > >>Usually, if you are using a web interface to access your email, only the > >>initial authentication is done via SSL. After that if your URL address > >>shifts to using

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread Walter Haidinger
On Tue, 21 Feb 2006, David Shaw wrote: > > If GnuPG could also store secret keys (btw, can it? have never checked) > > It's theoretically possible, but no keyserver works that way. Probably not for HTTP keyservers, but for LDAP offering strong authentication and TLS/SSL? A remotely accessible,