Thanks all. Re: GnuPG neophyte inquiries.

2006-08-20 Thread Caitlin
Hi. Thanks for all of the responses. I'll be purchasing: 'PGP & GPG Email for the Practical Paranoid' By NoStarch Press ($24.95) next week. Thanks, ~Caitlin __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around

Re: Book advice

2006-08-20 Thread Michael Fuhr
On Sun, Aug 20, 2006 at 10:08:37PM +0200, Johan Wevers wrote: > Not directly related to GnuPG, but does anyone here know the book > "Handbook of Applied Cryptography" fromn A.J. Menezes, P.C. van Oorschoot > and S.A. Vanstone, printed in 1996? I found it on eDonkey and wanted to > know if someone k

Re: GnuPG neophyte inquiries.

2006-08-20 Thread Johan Wevers
Qed wrote: >No, since the security issue is not related to the underlying >cryptographic algorithms(e.g.: some time ago ElGamal signatures were >discovered to be weak, so in newer version of GnuPG the generation of >such keys is disabled). They were not weak, there was an implementation error in

Book advice

2006-08-20 Thread Johan Wevers
Hello, Not directly related to GnuPG, but does anyone here know the book "Handbook of Applied Cryptography" fromn A.J. Menezes, P.C. van Oorschoot and S.A. Vanstone, printed in 1996? I found it on eDonkey and wanted to know if someone knows if it is advisable. It appears quite mathematical in its

Common gpg.conf to Linux and Windows, was Re: GnuPG (GPG) Problem

2006-08-20 Thread Ismael Valladolid Torres
Bo Berglund escribe: > So how does one do this on Windows I use Cygwin's gnupg so gpg.conf is at ~/.gnupg/gpg.conf just as usual on a UNIX computer. Below my gpg.conf, these are lines used on both Linux and Windows: default-cert-check-level 3 default-recipient-self keyserver pgp.rediris.es k

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Robert J. Hansen
Ismael Valladolid Torres wrote: > A smartcard is very convenient as far as it's a multi application > device, so you can store much other info apart from GnuPG keys, > i.e. Mozilla passwords or such. ... I'm sorry, I'm scratching my head over here trying to figure out how a flash drive doesn't als

Re: GnuPG neophyte inquiries.

2006-08-20 Thread Qed
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On 08/20/2006 07:31 AM, Caitlin wrote: > 1). My roommate and I share a WinXP box. If I install GnuPG 1.4.5 on > it, would this represent a potential security concern? Your keyring would be stored in your personal home dir, if you have installed XP

Re: GnuPG neophyte inquiries.

2006-08-20 Thread Robert J. Hansen
Caitlin wrote: > 1). My roommate and I share a WinXP box. If I install GnuPG 1.4.5 on > it, would this represent a potential security concern? We can't answer this question with a 'yes' or a 'no'. Decisions about security are up to you. We can hopefully give you some questions which will help yo

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Ismael Valladolid Torres
Robert J. Hansen escribe: > Speaking for myself, I have doubts about the long-term security of > RSA/1024. I much prefer RSA/2048 instead. Thus, the OpenPGP card fails > to meet my own security policy... whereas storing a copy of my private > key on my USB dongle, with a high-security passphrase,

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Ismael Valladolid Torres
Jonathan Rockway escribe: > I would recommend that you don't do that. What if you lose the drive? > Then your private key is compromised. Do you have a revocation > certificate in a safe location? If not, you can't even tell anyone that > your private key has been compromised! Not good! Sure!

Re: GnuPG neophyte inquiries.

2006-08-20 Thread Graham
On Sunday 20 August 2006 6:31 am, Caitlin wrote: > Hi all. Hi and welcome :-) > Ok. I'm quite interested in GnuPG but I felt compelled to ask a few > questions. Ready? > > 1). My roommate and I share a WinXP box. If I install GnuPG 1.4.5 on > it, would this represent a potential security concern

GnuPG neophyte inquiries.

2006-08-20 Thread Caitlin
Hi all. Ok. I'm quite interested in GnuPG but I felt compelled to ask a few questions. Ready? 1). My roommate and I share a WinXP box. If I install GnuPG 1.4.5 on it, would this represent a potential security concern? 2). Would I have to copy and paste encrypted messages received via email to a

Re: GnuPG (GPG) Problem

2006-08-20 Thread Bo Berglund
On Sat, 19 Aug 2006 16:46:07 +0200, Ismael Valladolid Torres <[EMAIL PROTECTED]> wrote: >John Clizbe escribe: >> Just copy the keyring files. > >I store my private keyring and a public keyring containing only my >public key on a pendrive, then in your gpg.conf: > >keyring /path/to/pendrive/pubring

Re: What does key properties validity and trust 'None' mean???

2006-08-20 Thread Bo Berglund
On Sat, 19 Aug 2006 14:33:58 -0500, John Clizbe <[EMAIL PROTECTED]> wrote: >Bo Berglund wrote: >> We are new to GPG and we have used gpg4win 1.0.5 to install the >> programs on Windows XP Pro PC:s. Some years ago we used PGP 7, but now >> it turns out that we cannot get it to work on our XP-Pro PC