Re: Re: Signing a key (meaning)

2011-04-07 Thread Sven Radde
Hi! Am -10.01.-28163 20:59, schrieb takethe...@gmx.de: > I wonder how I can check whether the email address in the ID realy belongs to > the keyowner. You can only check whether the key owner "has access" to the email address. You cannot check whether this access is in any way exclusive, legit

Re: Signing a key (meaning)

2011-04-07 Thread Charly Avital
Faramir wrote the following on 4/7/11 8:29 PM: > Oh, well, encryption faeries soon or latter will upload your keys to > keyservers. And you can't prevent people from signing it, specially the > newbies reading support lists. I can't prevent it, but I may naively expect people to respect conventi

Re: How to verify the e-mail address when certifying OpenPGP User IDs [was: Re: Signing a key (meaning)]

2011-04-07 Thread Grant Olson
On 4/7/11 8:05 PM, Jan Janka wrote: > Hi Daniel, > > thanks for the answer, but it seems to me with this procedure you only > checkwhetherthe person has access to the email address, you > don't check whether this access is illegal, don't you? > > Tace care, > Jan > Well, yes, but the

Re: How to verify the e-mail address when certifying OpenPGP User IDs [was: Re: Signing a key (meaning)]

2011-04-07 Thread Daniel Kahn Gillmor
On 04/07/2011 08:05 PM, Jan Janka wrote: > thanks for the answer, but it seems to me with this procedure you only > checkwhetherthe person has access to the email address, you > don't check whether this access is illegal, don't you? I have made no claims anywhere about legality or illeg

Re: Signing a key (meaning)

2011-04-07 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 07-04-2011 13:06, Charly Avital escribió: ... > In another forum, one of the members signed my public key and uploaded > it to the keyservers with his/her signature, without asking nor > notifying me (the key was already on the key servers, but wi

Re: How to verify the e-mail address when certifying OpenPGP User IDs [was: Re: Signing a key (meaning)]

2011-04-07 Thread Jan Janka
Hi Daniel, thanks for the answer, but it seems to me with this procedure you only checkwhetherthe person has access to the email address, you don't check whether this access is illegal, don't you? Tace care, Jan Original-Nachricht > Datum: Thu, 07 Apr 2011 19:49:50 -

How to verify the e-mail address when certifying OpenPGP User IDs [was: Re: Signing a key (meaning)]

2011-04-07 Thread Daniel Kahn Gillmor
On 04/07/2011 07:33 PM, takethe...@gmx.de wrote: > The reason I asked this quetion is that I wonder how I can check whether the > email address in the ID realy belongs to the keyowner. The standard way i've seen e-mail address verification done is with caff ("certificate authority fire and forge

Re: Signing a key (meaning)

2011-04-07 Thread takethebus
Thanks everybody for all the answers. The reason I asked this quetion is that I wonder how I can check whether the email address in the ID realy belongs to the keyowner. Let's say I've been knowing Peter Hansen for quite some time, but I don't know his email address. Now he tells me it's funny

Re: gpg: encryption failed: public key not found

2011-04-07 Thread John Clizbe
123098 wrote: > > I've made a script that (among other things) encrypts some sensitive data > that I have to send afterwards to a different user on a different computer. > If I encrypt the data by command-line I have no problem at all and > everything goes smoothly. However, when I try to get cron

Re: GnuGP Error

2011-04-07 Thread John Clizbe
Bronson K Shadlock wrote: > > Hi there, > > We are using GnuGP 1.1.3 on a few PCs, all able to decrypt using 1 public Do you mean GPG4Win 1.1.3? GnuPG 1.1.3 (if it existed) would date back to circa 2000. > key. I can use it on my PC, but a new user on a new PC is getting constant > errors. I

Re: Set key to be default to sign/encrypt

2011-04-07 Thread Hauke Laging
Am Donnerstag 07 April 2011 21:10:45 schrieb Csabi: > gpg: skipped "4096R/626D791C": secret key not available > What am i doing wrong? Wrong question again. What HAVE you done wrong i.e. what have you done to your secret key? After key generation the secret key is shown by gpg --list-secret-ke

Re: gpg: encryption failed: public key not found

2011-04-07 Thread Hauke Laging
Am Donnerstag 07 April 2011 21:08:44 schrieb Daniel Kahn Gillmor: > > and mark it as "trusted-key" in the config file. > > I don't think this is either necessary or advisable. I must admit that I haven't checked what happens during batch processing. If root does not have an own key for signing

Re: Set key to be default to sign/encrypt

2011-04-07 Thread Csabi
Hi! Thx your reply. I tried the following: gpg -u 4096R/626D791C --detach-sign t.txt The error is the same: gpg: skipped "4096R/626D791C": secret key not available gpg: signing failed: secret key not available I tried it with the public key's key ID too but the result was the same. What

Re: gpg: encryption failed: public key not found

2011-04-07 Thread Daniel Kahn Gillmor
On 04/07/2011 02:55 PM, Hauke Laging wrote: > The easiest way to solve this should be to import the public key as root Or, have your cronjob switch to being the correct non-privileged user before doing any of the rest of its work. > and mark it as "trusted-key" in the config file. I don't think

Re: gpg: encryption failed: public key not found

2011-04-07 Thread Hauke Laging
Am Donnerstag 07 April 2011 13:36:31 schrieb 123098: > If I encrypt the data by command-line I have no problem at all And "I" is root? > gpg --encrypt -r "[Recipient's_ID]" [Filename] This uses the standard keyring nothing else. > cron is running as root and therefore has access to the key's

gpg: encryption failed: public key not found

2011-04-07 Thread 123098
I've made a script that (among other things) encrypts some sensitive data that I have to send afterwards to a different user on a different computer. If I encrypt the data by command-line I have no problem at all and everything goes smoothly. However, when I try to get cron to run the script, I ge

Re: Signing a key (meaning)

2011-04-07 Thread Daniel Kahn Gillmor
On 04/07/2011 12:06 PM, Charly Avital wrote: > In another forum, one of the members signed my public key and uploaded > it to the keyservers with his/her signature, without asking nor > notifying me (the key was already on the key servers, but without this > added signature) > > I didn't invite th

Re: Set key to be default to sign/encrypt

2011-04-07 Thread Hauke Laging
Am Donnerstag 07 April 2011 14:26:50 schrieb Csabi: > The default-key option in gpg.conf is not operate me, if i using it > then the following error message appear: Failed to sign, secret key is > not available. > How can i set this new keipair to be default? You ask the wrong question. The quest

Re: Signing a key (meaning)

2011-04-07 Thread Charly Avital
Kevin wrote the following on 4/7/11 9:49 AM: > If nothing else, it > establishes that you have some kind of relationship with the owner of > the key you signed. It may establish that you an he/she were in a > specific place at a specific time (e.g. a keysigning party), etc. The > words "no informat

Re: Signing a key (meaning)

2011-04-07 Thread Kevin
On Thu, Apr 07, 2011 at 10:31:24AM +0200 Also sprach takethe...@gmx.de: Hi everybody out there, I put some thoughts on the meaning of signing a key and came to an unusual definition. Maybe someone likes to discuss it with me, since I'm not quite sure whether I should recommend others to interpre

Set key to be default to sign/encrypt

2011-04-07 Thread Csabi
Hi all! I created a new keypair now and i would like to set this new keypair to my default keypair. How can i do it? GNUPG using my older key to sign/encrypt messages. The default-key option in gpg.conf is not operate me, if i using it then the following error message appear: Failed to sign, secre

Re: Signing a key (meaning)

2011-04-07 Thread Aaron Toponce
On Thu, Apr 07, 2011 at 10:31:24AM +0200, takethe...@gmx.de wrote: > Definition: Signing a key means saying: "I confirm the full name in > the key's ID is the keyowner's right name. The email address in the ID > is the one the keyowner put there, but I cannot guarantee it's > his/hers. Yes you can

Re: gpgme-1.3.0 make error

2011-04-07 Thread Werner Koch
On Thu, 7 Apr 2011 10:22, spelb...@gmail.com said: > - libgpg-error-1.10 (Went OK) This is okay. >> >> /usr/local/lib/libassuan.so.0: undefined reference to >> `gpg_err_set_errno' Looking again at the your compile log: libtool: link: gcc -I/usr/local/include -I/usr/include -g -O2 -Wall -

Re: GnuGP Error

2011-04-07 Thread Werner Koch
On Thu, 7 Apr 2011 04:25, bshadl...@hertz.com said: > We are using GnuGP 1.1.3 on a few PCs, all able to decrypt using 1 public I assume you mean Gpg4win 1.1.3 which includes a relative new GnuPG version. > key. I can use it on my PC, but a new user on a new PC is getting constant > errors. I

RE: GnuGP Error

2011-04-07 Thread Lee Elcocks
What is the error? > Subject: GnuGP Error > To: Gnupg-users@gnupg.org > From: bshadl...@hertz.com > Date: Thu, 7 Apr 2011 15:25:28 +1300 > > > Hi there, > > We are using GnuGP 1.1.3 on a few PCs, all able to decrypt using 1 public > key. I can use it on my PC, but a new user on a new PC is ge

Re: gpgme-1.3.0 make error

2011-04-07 Thread Michel Mansens
I installed the libgpg-error the same day (libgpg-error-1.10). So its the latest version I guess. Also I'm trying to install it on Linux Suse. I installed in this order: - libgpg-error-1.10 (Went OK) - libassuan-2.0.1 (Went OK) - gpgme-1.3.0 (ERROR) Michel 2011/4/7 Werner Koch > On Wed, 6 Apr

GnuGP Error

2011-04-07 Thread Bronson K Shadlock
Hi there, We are using GnuGP 1.1.3 on a few PCs, all able to decrypt using 1 public key. I can use it on my PC, but a new user on a new PC is getting constant errors. I've installed the SW, imported the correct and only key, but still get the error. If I log in to the new PC, I get the same er

Signing a key (meaning)

2011-04-07 Thread takethebus
Hi everybody out there, I put some thoughts on the meaning of signing a key and came to an unusual definition. Maybe someone likes to discuss it with me, since I'm not quite sure whether I should recommend others to interpret signing that way. Definition: Signing a key means saying: "I confirm th

Re: gpgme-1.3.0 make error

2011-04-07 Thread Werner Koch
On Wed, 6 Apr 2011 22:52, do...@dougbarton.us said: >> /usr/local/lib/libassuan.so.0: undefined reference to `gpg_err_set_errno' He should update libgpg-error. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. _