Re: [Announce] [security fix] Libgcrypt and GnuPG

2014-08-09 Thread Branko Majic
On Fri, 08 Aug 2014 12:17:06 +0200 Werner Koch wrote: > Hi! > > While evaluating the "Get Your Hands Off My Laptop" [1] paper I missed > to describe [2] a software combination which has not been fixed and is > thus vulnerable to the attack described by the paper. If you are using > a GnuPG vers

Re: [Announce] [security fix] Libgcrypt and GnuPG

2014-08-09 Thread Pete Stephenson
On Sat, Aug 9, 2014 at 10:49 AM, Werner Koch wrote: > On Sat, 9 Aug 2014 01:24, p...@heypete.com said: > >>> The GPG4Win folks are gearing up for a new release this August. >> >> Excellent. I look forward to it. > > The problem with gpg4win is that it is hard to build in particular the > KDE stuf

Re: Fwd: [Enigmail] [ANN] Enigmail v1.7 available

2014-08-09 Thread Samir Nassar
On Saturday, 2014-08-09 12:03:28 Johan Wevers wrote: > Not compatible with Thunderbird 3.1.20. And considering the way Mozilla > is currently adding bloat to all its programs (Hi Netscape 4.0), I don't > see any reason to upgrade. I had to read the Thunderbird version string twice before understa

Re: Fwd: [Enigmail] [ANN] Enigmail v1.7 available

2014-08-09 Thread Kosuke Kaizuka
On Sat, 09 Aug 2014 12:03:28 +0200, Johan Wevers wrote: > On 19-07-2014 15:29, John Clizbe wrote: > >> As there are many Enigmail users who read this list, but not [Enigmail], I'm >> forwarding the announcement of the newest release of Enigmail, v1.7. >> There are quite a few changes in this relea

Re: Fwd: [Enigmail] [ANN] Enigmail v1.7 available

2014-08-09 Thread Johan Wevers
On 19-07-2014 15:29, John Clizbe wrote: > As there are many Enigmail users who read this list, but not [Enigmail], I'm > forwarding the announcement of the newest release of Enigmail, v1.7. > There are quite a few changes in this release. Not compatible with Thunderbird 3.1.20. And considering th

Re: [Announce] [security fix] Libgcrypt and GnuPG

2014-08-09 Thread Werner Koch
On Sat, 9 Aug 2014 01:24, p...@heypete.com said: >> The GPG4Win folks are gearing up for a new release this August. > > Excellent. I look forward to it. The problem with gpg4win is that it is hard to build in particular the KDE stuff can't be easily cross compiled. It is quite some work to main

Re: gnupg - pgp reading signed files

2014-08-09 Thread Werner Koch
On Fri, 8 Aug 2014 22:31, joh...@vulcan.xs4all.nl said: > Is there any chance of solving this issue or is rfc1991 considered > abandoned? Right. I does not make any sense to try to be compatible to PGP 2. It is nice that you can decrypt PGP2 files but everything else is useless. Face it: PGP 2