Re: gpg for pseudonymous users [was: Re: gpg for anonymous users - Alternative to the web of trust?]

2013-04-05 Thread Jean-David Beyer
On 04/05/2013 04:27 PM, Peter Lebbing wrote: > I have no idea how Red Hat does this, but it seems unlikely to me. It's > not connected to the internet, but signs the whole repository, and each > individual security update etcetera. Is there a guy who keeps going back > and forth with a USB stick be

Re: gpg for pseudonymous users [was: Re: gpg for anonymous users - Alternative to the web of trust?]

2013-04-05 Thread Peter Lebbing
On 05/04/13 20:16, Jean-David Beyer wrote: > Probably the software Red Hat supplies is kept on a machine that is not > on the Internet and it is all signed on that machine. At which point, > the signed software is placed on an Internet-connected machine for > downloading (seems like a good idea to

Re: gpg for pseudonymous users [was: Re: gpg for anonymous users - Alternative to the web of trust?]

2013-04-05 Thread Jean-David Beyer
On 04/05/2013 11:39 AM, Stan Tobias wrote: > The problem we're trying to solve here is how to ascertain originality > of a software development line, IOW how to authenticate it. What I do is get my OS (a Linux distribution from Red Hat) on a DVD directly from them. It contains, along with everythi

Re: gpg for pseudonymous users [was: Re: gpg for anonymous users - Alternative to the web of trust?]

2013-04-05 Thread Daniel Kahn Gillmor
On 04/05/2013 11:39 AM, Stan Tobias wrote: > People assume pseudonyms for various reasons, anonymity being but one > of them. It is clear the person behind "adrelanos" wants to remain > anonymous, while giving a name to his action. This is practically the definition of a pseudonym, not anonymity.

Re: gpg for pseudonymous users [was: Re: gpg for anonymous users - Alternative to the web of trust?]

2013-04-05 Thread Stan Tobias
Daniel Kahn Gillmor wrote: > I've changed the subject line to indicate that this thread is about > establishing a pseudonym, *not* about anonymous users. This is a subtle > but important difference. People assume pseudonyms for various reasons, anonymity being but one of them. It is clear the

Re: Why does gpg use so much entropy from /dev/random?

2013-04-05 Thread Philip Potter
Hi Werner, Thanks very much for your response. I think I'll take some time to digest it :) Phil On 2 April 2013 11:52, Werner Koch wrote: > On Sun, 31 Mar 2013 11:45, philip.g.pot...@gmail.com said: > >> Can anyone shed any light on this? Why does GPG use more entropy than >> /dev/random says i

Re: Fingerprint of the subkey just created?

2013-04-05 Thread Peter Pentchev
On Thu, Apr 04, 2013 at 05:36:46PM -0400, ved...@nym.hush.com wrote: > Daniel Kahn Gillmor dkg at fifthhorseman.net > wrote on Thu Apr 4 22:56:50 CEST 2013 : > > >gpg will emit the fingerprints for the subkeys if you supply the > --fingerprint argument twice. So you might try parsing the output o

Please fix subscribe at http://lists.wald.intevation.org/mailman/listinfo/gpg4win-announce

2013-04-05 Thread Don Saklad
Please fix subscribe at http://lists.wald.intevation.org/mailman/listinfo/gpg4win-announce Subscribe didn't work !... interrupted by the warning untrusted. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-

A PC user unfamiliar with any free software would like to send me messages that only we can read. Now what do I do?]

2013-04-05 Thread Don Saklad
A PC user unfamiliar with any free software would like to send messages that only the two of us can read. Now what do I do? The numbers of steps for it appear to be insurmountable! And I've failed to understand GNUPG myself. ___ Gnupg-users mailing lis

Re: A PC user unfamiliar with any free software would like to send me messages that only we can read. Now what do I do?]

2013-04-05 Thread Jan Ignatius
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2013-04-05 05:23, Don Saklad wrote: A PC user unfamiliar with any free software would like to send messages that only the two of us can read. Now what do I do? The numbers of steps for it appear to be insurmountable! And I've failed to understand