Re: Automatic e-mail encryption

2014-07-21 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 21 July 2014 at 8:56:21 PM, in , Peter Lebbing wrote: > I don't think this helps much authenticating one SMTP > server to another. Even if it would be possible, they > are usually operated by ISP's; I don't see them using > the WoT f

Re: Mutt: Decrypting inline gpg format directly

2014-07-21 Thread Jeff Fisher
On Fri, Jul 18, 2014 at 06:18:39PM +0200, The Fuzzy Whirlpool Thunderstorm wrote: > I wonder if Mutt can be configured to decrypt inline pgp messages > automatically, without piping the attachment to `gpg --decrypt`. I > know, piping works, but it'd be more convenient to have mutt do the > piping

Re: Automatic e-mail encryption

2014-07-21 Thread Doug Barton
On 07/21/2014 09:23 AM, Peter Lebbing wrote: By the way, regarding DANE as an alternative to the CA system: I think a proper implementation of authentication through DNS could well be way better than the CA system: at least you can only be screwed by people having access to signing keys for the r

Re: Automatic e-mail encryption

2014-07-21 Thread Peter Lebbing
On 21/07/14 21:15, MFPA wrote: > Doesn't Monkeysphere [0] allow the use of the OpenPGP web of trust to > authenticate certificates for TLS? I don't think this helps much authenticating one SMTP server to another. Even if it would be possible, they are usually operated by ISP's; I don't see them us

Re: Automatic e-mail encryption

2014-07-21 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 21 July 2014 at 5:23:51 PM, in , Peter Lebbing wrote: > On 21/07/14 15:32, Mark H. Wood wrote: >> Please remind me why we need an alternative to TLS. > Well, I actually meant X.509 and the CA system, which > is what is currently abu

Re: symmetric email encryption

2014-07-21 Thread Bob Holtzman
On Mon, Jul 21, 2014 at 09:12:36AM -0400, Mark H. Wood wrote: > On Sat, Jul 19, 2014 at 05:46:02PM -0700, Bob Holtzman wrote: > > On Sat, Jul 19, 2014 at 01:55:45PM -0400, Robert J. Hansen wrote: > > > > A factor of two is "immense" to you...? > > > > > > Yes. A secret that only I know I can keep

Re: Automatic e-mail encryption

2014-07-21 Thread Peter Lebbing
On 21/07/14 15:32, Mark H. Wood wrote: > Please remind me why we need an alternative to TLS. Well, I actually meant X.509 and the CA system, which is what is currently abundantly used in SSL and TLS. If you plug in a different form of authentication, I think the rest is okay. > I treat hop-by-hop

Re: even after deleting the 1st key pair, owner's trust is defaulting to ultimate

2014-07-21 Thread Daniel Kahn Gillmor
On 07/21/2014 04:33 AM, war.dhan wrote: > i have created a key pair using the defaults at first. > et the owners trust as ultimate using enigmail 1.7. > then i realised about not adding : > personal-digest-preferences SHA256 > cert-digest-algo SHA256 > default-preference-list SHA512 SHA384 SHA256 S

Re: Is it possible to set a passphrase_cb in gpgme with openpgp protocol

2014-07-21 Thread Werner Koch
On Fri, 4 Jul 2014 11:52, ret...@rethab.ch said: > I read in the ruby-bindings library that this only worked with version 1.X > but seems not to work anymore with 2.X. Is there any truth to this? Right. GnuPG-2 require the gpg-agent and the gpg-agent is soley responsible for asking for the pass

Re: Mutt: Decrypting inline gpg format directly

2014-07-21 Thread Werner Koch
On Fri, 18 Jul 2014 18:18, whirlp...@blinkenshell.org said: > I wonder if Mutt can be configured to decrypt inline pgp messages > automatically, without piping the attachment to `gpg --decrypt`. IIRC, I implemented that about a decade ago. Simply put set crypt_use_gpgme into your ~/.muttrc.

Re: ECC and CMS (was: [Announce] The fifth Beta for GnuPG 2.1 is now available for testing)

2014-07-21 Thread Werner Koch
On Tue, 8 Jul 2014 09:56, bernh...@intevation.de said: > Do you also know the status of CMS (x.509) for S/MIME? May work but likely needs a bit of testing and code fiddling. I have lost most interest in CMS, thus better do not expect that I will spend time on it. Shalom-Salam, Werner -

Re: Automatic e-mail encryption

2014-07-21 Thread Mark H. Wood
On Sat, Jul 19, 2014 at 02:26:44PM +0200, Peter Lebbing wrote: > By the way: if we had a working alternative to SSL/TLS, all the mail > servers could talk to eachother securely without eavesdropping. That way Please remind me why we need an alternative to TLS. > the contents of e-mails is only ex

Re: even after deleting the 1st key pair, owner's trust is defaulting to ultimate

2014-07-21 Thread Werner Koch
On Mon, 21 Jul 2014 10:33, wardhan.v@gmail.com said: > to my surprise the 2nd key pair has owners trust as ultimate. Ultimate trust is always set for newly created keys. It is not set if you import a key. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesges

Re: scdaemon support for SmartCard-HSM

2014-07-21 Thread Werner Koch
Hi Andreas, On Fri, 18 Jul 2014 16:44, andreas.schwier...@cardcontact.de said: > we've added support for the SmartCard-HSM to scdaemon. Please find the > patch that applies to master at [1]. If you want me to apply that patch please read doc/DETAILS on how to send a DCO. (I'd appreciate a sample

Re: symmetric email encryption

2014-07-21 Thread Mark H. Wood
On Sat, Jul 19, 2014 at 05:46:02PM -0700, Bob Holtzman wrote: > On Sat, Jul 19, 2014 at 01:55:45PM -0400, Robert J. Hansen wrote: > > > A factor of two is "immense" to you...? > > > > Yes. A secret that only I know I can keep; a secret known to two people > > can only be kept for a while. Yes, t

even after deleting the 1st key pair, owner's trust is defaulting to ultimate

2014-07-21 Thread war.dhan
i have created a key pair using the defaults at first. et the owners trust as ultimate using enigmail 1.7. then i realised about not adding : personal-digest-preferences SHA256 cert-digest-algo SHA256 default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompr