Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
On 11/02/2013 07:34 PM, Leo Gaspard wrote: > Well... > 1) Checked by the other key's message. Because signed (K1) message from > Alice, > saying she has access to K2, means any UID on K2 named Alice is as right > as > the equivalent UID on K1. So the UIDs are correct. > 2) Checked by th

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Leo Gaspard
(Sorry, I once again sent the message only to you and not to the list -- I really need to get used to mailing lists, sorry !) On Sat, Nov 02, 2013 at 07:08:15PM -0700, Paul R. Ramer wrote: > On 11/02/2013 02:25 PM, Leo Gaspard wrote: > > Isn't the presence of a UID sufficient for this matter ? > >

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
On 11/02/2013 02:25 PM, Leo Gaspard wrote: > On Sat, Nov 02, 2013 at 11:02:57AM -0700, Paul R. Ramer wrote: >> Stan Tobias wrote: >>> Yes, but by remote communication. The reasoning goes like this: The >>> signature is validated by my certificate (or, in case 2a, by my >>> friends' >>> whom I tru

Re: Quotes from GPG users

2013-11-02 Thread Stan Tobias
On 30/10/13 11:58, Sam Tuke wrote: > I'm working with Werner to promote GnuPG and raise awareness. To that end > we're > collecting quotes from users - endorsements from people who know and trust > GPG, > people like you. > > If you want to help us, send your own statement about why GPG is impor

Re: gpgsm and expired certificates

2013-11-02 Thread Stan Tobias
"Robert J. Hansen" wrote: > My previous email was pretty dry and impersonal. This one is very personal. > > > Isn't the NSA "a government based organisation?" Surely > > guilt-by-association renders every government based organisation just > > as nefarious as the NSA. > > My current job > John

Re: gpgsm and expired certificates

2013-11-02 Thread Ingo Klöcker
On Saturday 02 November 2013 19:48:39 Uwe Brauer wrote: > >> "MFPA" == MFPA writes: >> Hi >> On Sunday 27 October 2013 at 2:46:05 PM, in >> , Uwe Brauer wrote: >> >> Isn't the NSA "a government based organisation?" Surely >> guilt-by-association renders every government b

Re: gpgsm and expired certificates

2013-11-02 Thread Filip M. Nowak
On 02.11.2013 20:20, Peter Lebbing wrote: > On 02/11/13 19:48, Uwe Brauer wrote: >> So either you claim to have evidence that this modules have been hacked >> and the key pair is transferred to some of these evil organisations or I >> really don't see your point. > > I think the most common way fo

Re: gpgsm and expired certificates

2013-11-02 Thread Peter Lebbing
On 02/11/13 19:48, Uwe Brauer wrote: > So either you claim to have evidence that this modules have been hacked > and the key pair is transferred to some of these evil organisations or I > really don't see your point. I think the most common way for an X.509 CA to be deceitful is by giving someone

Re: gpgsm and expired certificates

2013-11-02 Thread Uwe Brauer
>> "MFPA" == MFPA writes: > Hi > On Sunday 27 October 2013 at 2:46:05 PM, in > , Uwe Brauer wrote: > Isn't the NSA "a government based organisation?" Surely > guilt-by-association renders every government based organisation just > as nefarious as the NSA. Your point being? I

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
Stan Tobias wrote: >Yes, but by remote communication. The reasoning goes like this: The >signature is validated by my certificate (or, in case 2a, by my >friends' >whom I trust fully). The message is authenticated by X's valid >signature, >therefore the message has not been tampered with and its

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 02/11/13 17:43, Johannes Zarl wrote: > "My handwriting is unique. With GPG, so is my email." Brilliant, thanks! Admirably concise. Sam. -- Sam Tuke Campaign Manager Gnu Privacy Guard 0044 78680 77871 signature.asc Description: OpenPGP digital signature

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/11/13 17:38, kwadronaut wrote: > GnuPG might be clumsy, but it gets my message across, to the intendent > recipients! Thanks kwadronaut. You're highlighting the signing aspect here I presume? Best, Sam. - -- Sam Tuke Campaign Manager Gnu

Re: Quotes from GPG users

2013-11-02 Thread Johan Wevers
On 2-11-2013 17:43, Johannes Zarl wrote: > I wonder why not more respondents have written about authenticity? Probably because encryption is more the more important use of gpg to most people. If you have sensitive discussions via email, my experience is that if a stranger would imperonate one sen

Re: gpgsm and expired certificates

2013-11-02 Thread Johan Wevers
On 2-11-2013 15:36, Robert J. Hansen wrote: > I can't help but think, as I see the tenor of the discussion about the > NSA, that there are probably thousands of good and decent people in that > agency who are concerned with following the law and respecting civil > liberties -- and they probably fe

Re: Quotes from GPG users

2013-11-02 Thread Johannes Zarl
On Wednesday 30 October 2013 11:58:56 Sam Tuke wrote: > I'll collect them and pick the best for use now and in future. > > Stimuli: > You trust GPG with what? > It's the only app that does what for you / your business? > Without it you couldn't do what? I wonder why not more respondents have writ

Re: Quotes from GPG users

2013-11-02 Thread kwadronaut
On 30/10/13 11:58, Sam Tuke wrote: > Hi all, > > I'm working with Werner to promote GnuPG and raise awareness. To that end > we're > collecting quotes from users - endorsements from people who know and trust > GPG, > people like you. > > If you want to help us, send your own statement about why

Re: Quotes from GPG users

2013-11-02 Thread Heinz Diehl
On 30.10.2013, Sam Tuke wrote: > I'll collect them and pick the best for use now and in future. "GPG - keeps the XXX from your door!" :-) [Replace XXX with any three letter agency of your choice] ___ Gnupg-users mailing list Gnupg-users@gnupg.org h

Re: Quotes from GPG users

2013-11-02 Thread Heinz Diehl
On 02.11.2013, Sam Tuke wrote: > Research would definitely be helpful. There are many well written guides, > video > tutorials, and even e-learning courses on how to setup GPG however, and some > applications make it very easy. When you think of the "common windows user" who solely wants to dou

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 2 November 2013 at 2:36:27 PM, in , Robert J. Hansen wrote: > They are not practicing guilt by suspicion. They are > practicing, "hey, let's collect as much information as > possible on this crime so that we can find the truly > gu

Re: gpgsm and expired certificates

2013-11-02 Thread Robert J. Hansen
> I wish to extend my sincere and unreserved apologies to all the people > I unintentionally offended. Thank you for this. (Seriously.) There's an American movie that probably hasn't been seen much in Europe. _High Noon_, starring Gary Cooper, which may be the finest Western ever made. In a nu

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 1 November 2013 at 6:47:56 PM, in , Robert J. Hansen wrote: >> Isn't the NSA "a government based organisation?" >> Surely guilt-by-association renders every government >> based organisation just as nefarious as the NSA. > This is wh

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 1 November 2013 at 7:25:30 PM, in , Robert J. Hansen wrote: > But since some of > my R&D funding comes from the government, I'm just as > nefarious as the NSA. [...] > John Moore III, who hasn't been seen on this list in [...] > Ap

Re: make gpg-agent forget the PIN

2013-11-02 Thread Peter Lebbing
On 02/11/13 12:26, Werner Koch wrote: > Or better: pull off the card and take it with you. I unplug my reader (USB) when I don't use it; I leave the card in. I now have OpenPGP v2 cards, but I earlier had v1 cards that started to malfunction after some time. I had the impression that they were mos

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 31/10/13 08:33, Heinz Diehl wrote: > Raised awareness does seldom lead to change (just as knowledge and > attitudes). Before developing a strategy on promoting the use of > GPG, the barriers which prevent people from using it should be > explored and fed back into the implementation strategy.

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 30/10/13 19:31, Martin Gollowitzer wrote: > Unfortunately, this is slightly longer (it's really hard to stick to 130 > characters): Yes, it really is :) > GnuPG allows for both proving a message's authenticity and preventing > eavesdropping. I

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 31/10/13 22:47, Paul R. Ramer wrote: > Well, here is my input for your project. > > I wouldn't be able to communicate sensitive documents without it. Many thanks Paul! Sam. -- Sam Tuke Campaign Manager Gnu Privacy Guard 0044 78680 77871 signature.asc Description: OpenPGP digital signatur

Re: make gpg-agent forget the PIN

2013-11-02 Thread Werner Koch
On Fri, 1 Nov 2013 20:17, pe...@digitalbrains.com said: > It's called 'scforget' here. Or better: pull off the card and take it with you. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users mail

Re: make gpg-agent forget the PIN

2013-11-02 Thread Johannes Zarl
Thanks! That was exactly what I was looking for. Johannes On Friday 01 November 2013 20:17:41 Peter Lebbing wrote: > Hi Johannes, > > > Is there any way to explicitly tell gpg-agent to forget the pin as well? > > Based on a post once made by Werner, I have this script: > > ---8<-