Re: invalid gpg key revocation

2012-03-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 7 March 2012 at 11:52:39 PM, in , Hauke Laging wrote: > The statement "Only your private key can generate the > revocation certificate" is not wrong, at least not in a > useful understanding which is: "It is impossible to > revok

GnuPG on Mac OS

2012-03-18 Thread Anthony Papillion
So I've installed GnuPG on a friends Mac and, for the most part, it's working fine. She can encrypt/decrypt/sign with no problems at all. But, for some reason, every time she does one of those functions, she has to re-enter her passphrase. She's using the Enigmail plugin for Thunderbird and we set

Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 19:13, freej...@is-not-my.name wrote: >> I should note that many people actually *don't* check if the e-mail >> address belongs to the person whose UID they sign. > > That doesn't sound right. We could have a simple misunderstanding here: I do think many people check if the person wh

Re: Installing Gnu PG on MacOS X Snow leopard 10.6.8

2012-03-18 Thread Ken Hagler
On Mar 18, 2012, at 11:15 AM, Nima Sahraneshin wrote: > I want to install Gnu PG on MacOS X Snow leopard 10.6.8 .After > ./configure I started make and saw this errors; I recommend using the GPGTools installer: . They've already dealt with all the misery for you. --

Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 19:13, freej...@is-not-my.name wrote: > Not necessarily but even if they did, how do they have access to the key? The attacker is doing you a real service getting /your/ key signed then :) Wasn't the purpose of the attacker to get his /own/ key falsely signed? The key he does have acc

Re: comments on uid

2012-03-18 Thread Eric H. Christensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Mar 18, 2012 at 06:13:32PM -, freej...@is-not-my.name wrote: > > I should note that many people actually *don't* check if the e-mail > > address belongs to the person whose UID they sign. If this were as > > "simple" to prove as it is to pr

Installing Gnu PG on MacOS X Snow leopard 10.6.8

2012-03-18 Thread Nima Sahraneshin
Dear all, I want to install Gnu PG on MacOS X Snow leopard 10.6.8 .After ./configure I started make and saw this errors; ccid-driver.c:92:17: error: usb.h: No such file or directory ccid-driver.c:237: error: expected specifier-qualifier-list before ‘usb_dev_handle’ ccid-driver.c: In function ‘my_

Re: comments on uid

2012-03-18 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 18-03-2012 15:13, freej...@is-not-my.name escribió: >> I should note that many people actually *don't* check if the >> e-mail address belongs to the person whose UID they sign. If this >> were as ... > That doesn't sound right. If you can't verify

Re: comments on uid

2012-03-18 Thread Daniel Kahn Gillmor
On 03/18/2012 04:13 AM, freej...@is-not-my.name wrote: My question is on a situation I didn't add the comment by mistake when I created the key and now I'd like to be able to add a comment. The key isn't signed etc. Thanks. I suggest that you probably actually don't want the comment at all. Th

Re: comments on uid

2012-03-18 Thread freejack
> I should note that many people actually *don't* check if the e-mail > address belongs to the person whose UID they sign. If this were as > "simple" to prove as it is to prove you have a certain name by showing a > passport or something, it might be checked more often. That doesn't sound right. I

Re: comments on uid

2012-03-18 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 18-03-2012 5:13, freej...@is-not-my.name escribió: ... > Alright that's a good answer but aren't people just confirming the > email address belongs to a known signer when they sign a key? Does > it really matter what the UID comment is? I think it

Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 09:13, freej...@is-not-my.name wrote: > Alright that's a good answer but aren't people just confirming the email > address belongs to a known signer when they sign a key? Does it really > matter what the UID comment is? I think it may be going a bit too far to say > the UID is guarantee

Re: comments on uid

2012-03-18 Thread freejack
> Well, the UID is what other people sign. Suppose by a wonderful > coincidence my name is Barack Obama. To prevent confusion, I create this > UID "Barack Obama (NOT the US president) > People sign this. They have seen my birth certificate... erm... I mean > passport :) Hahaha!!! Damn Hawaiins