Re: Where to save passphrases?

2014-07-25 Thread Mathias Bauer
* Schlacta, Christ wrote on Fri, 25 Jul 2014, at 15:25 (-0700): > I might suggest using the same passphrase... I don't want to sound harsh, but at this point you should hold on reading. "Using the same passphrase" should nowadays lead to big red STOP signs flashing up. > ...you use for your pas

Re: Where to save passphrases?

2014-07-25 Thread Schlacta, Christ
I might suggest using the same passphrase you use for your password manager for GPG. So long as you use a strong passphrase and practice good password practices on this password, it should remain uncompromised. On Fri, Jul 25, 2014 at 2:36 PM, Mathias Bauer wrote: > * Sudhir Khanger wrote on Fri

Re: Where to save passphrases?

2014-07-25 Thread Mathias Bauer
* Sudhir Khanger wrote on Fri, 25 Jul 2014, at 23:10 (+0530): > I was wondering once you have a working setup where do you save > your passphrases of your master and multiple subkeys. Usually it's *one* passphrase for the whole GnuPG key material. And even more usually this one is stored in one's

Where to save passphrases?

2014-07-25 Thread Sudhir Khanger
I am slowly getting the hang of GnuPG. I was wondering once you have a working setup where do you save your passphrases of your master and multiple subkeys. Is it safe to use some soft of password manager? Not really ideal but I use LastPass. -- Regards, Sudhir Khanger. sudhirkhanger.com https://

Re: mailto with pgp fingerprint

2014-07-25 Thread Thomas Harning
On Fri, 25 Jul 2014 14:44:54 +0100 MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi > > > On Friday 25 July 2014 at 2:01:28 PM, in > , > Schlacta, Christ wrote: > > > > On Jul 25, 2014 5:30 AM, "MFPA" > > <2014-667rhzu3dc-lists-g

Re: mailto with pgp fingerprint

2014-07-25 Thread Alexander Reiter
MFPA wrote: > If I recall correctly, PGP's keyserver "PGP Global Directory" sends an > email to each email address in the uids when a key is submitted, and > only lists those uids whose email address replies. It re-sends these > verification emails every six months, and deletes keys if there is no

Re: mailto with pgp fingerprint

2014-07-25 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 25 July 2014 at 3:12:58 PM, in , Thomas Harning wrote: > While PGP Global Directory provides for some basic > level of "this email address belongs to this key"... > its key signing policy leads to "cruft" buildup. Yes, I wasn't prom

Re: mailto with pgp fingerprint

2014-07-25 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 25 July 2014 at 2:01:28 PM, in , Schlacta, Christ wrote: > On Jul 25, 2014 5:30 AM, "MFPA" > <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: >> If I recall correctly, PGP's keyserver "PGP Global >> Directory" sends an email to each

Re: mailto with pgp fingerprint

2014-07-25 Thread Schlacta, Christ
On Jul 25, 2014 5:30 AM, "MFPA" <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi > > > On Wednesday 23 July 2014 at 9:02:23 PM, in > , steve wrote: > > > > Wouldn’t it be a nice solution, if key server software > > had a mechanism for use

Re: mailto with pgp fingerprint

2014-07-25 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 23 July 2014 at 9:02:23 PM, in , steve wrote: > Wouldn’t it be a nice solution, if key server software > had a mechanism for users to verify their UserID by > sending a mail to the mail address in question. If I recall correctly,