Re: gmail list replies [Re: Keeping .gnupg folder in cloud]

2014-09-18 Thread Sudhir Khanger
On Fri, Sep 19, 2014 at 2:40 AM, Pete Stephenson wrote: > On Thu, Sep 18, 2014 at 10:36 PM, Daniel Kahn Gillmor > wrote: >> On 09/18/2014 01:31 PM, Sudhir Khanger wrote: >>> PS:- Gmail has a weird setup. It would not allow me to reply back to >>> the mailing list email. Reply replies to person wh

Re: gmail list replies [Re: Keeping .gnupg folder in cloud]

2014-09-18 Thread Pete Stephenson
On Thu, Sep 18, 2014 at 10:36 PM, Daniel Kahn Gillmor wrote: > On 09/18/2014 01:31 PM, Sudhir Khanger wrote: >> PS:- Gmail has a weird setup. It would not allow me to reply back to >> the mailing list email. Reply replies to person whose email you >> clicked reply from and reply all goes to everyb

gmail list replies [Re: Keeping .gnupg folder in cloud]

2014-09-18 Thread Daniel Kahn Gillmor
On 09/18/2014 01:31 PM, Sudhir Khanger wrote: > PS:- Gmail has a weird setup. It would not allow me to reply back to > the mailing list email. Reply replies to person whose email you > clicked reply from and reply all goes to everybody's email on the > thread and not the list. You put this part of

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Sudhir Khanger
On Thu, Sep 18, 2014 at 7:34 PM, Robert J. Hansen wrote: > Potentially foolish Looks like there is consensus in not uploading .gnupg folder in cloud. >From what I gather it should be fine to keep local backups just prevent any data loss. -- Regards, Sudhir Khanger. sudhirkhanger.com https://git

New beta

2014-09-18 Thread Werner Koch
Hi, I just uploaded a new beta: ftp://ftp.gnupg.org/gcrypt/gnupg/unstable/gnupg-2.1.0-beta834.tar.bz2 ftp://ftp.gnupg.org/gcrypt/gnupg/unstable/gnupg-2.1.0-beta834.tar.bz2.sig Noteworthy changes in version 2.1.0-beta834 (2014-09-18) *

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Robert J. Hansen
>> Backup will be fully encrypted client side. > > So I think random_seed and all the other files are actually safe... Oh, good point. I missed that. My apologies to the original poster! ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread vedaal
On Thu Sep 18 17:13:58 CEST 2014 "Werner Koch" wrote: > But right, there are other files which should not be published. Is it possible to have .gnupg on a smart card ? vedaal ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Peter Lebbing
On 18/09/14 18:04, Robert J. Hansen wrote: > The biggest risk is the gpg.conf file, actually. If the admin > silently adds another "encrypt-to" and you don't notice it, then > you're totally hosed. The OP said: > Backup will be fully encrypted client side. So I think random_seed and all the oth

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Robert J. Hansen
> couldn't it also be that the owner/admin of the cloud makes changes to > the keyring? Like adding/removing keys. Dependent on the trust model > (like trust-always) this could be a very bad idea... Or it could result > in a DOS as the evil admin deleted the secret parts of some key pairs.. The bi

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread flapflap
Robert J. Hansen: >> What are your views on keeping .gnupg folder in cloud? > > Potentially foolish, but not for the reason you might expect. couldn't it also be that the owner/admin of the cloud makes changes to the keyring? Like adding/removing keys. Dependent on the trust model (like trust-alw

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Werner Koch
On Thu, 18 Sep 2014 16:04, r...@sixdemonbag.org said: > But the .gnupg folder contains a few sensitive files, such as > random_seed. If you publish your random seed, it's theoretically > possible for someone to determine the internal state of your random In the case of session keys, this is true

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Robert J. Hansen
> What are your views on keeping .gnupg folder in cloud? Potentially foolish, but not for the reason you might expect. I've often said I'm willing to publish my keyrings in the _New York Times_. I'm not being facetious. My passphrase is 128 random bits from /dev/urandom -- a bear to memorize, b

Re: (OT) encrypting to expired certificates

2014-09-18 Thread Robert J. Hansen
> And to think I blew a gasket because I grossly misinterpreted this sentence: To clarify: I think that the body politic should thank producers of food for being willing to throw away food (and thus, profit) in the interests of preserving the safety of the public's food supply. That's all. The

Re: Keeping .gnupg folder in cloud

2014-09-18 Thread Pete Stephenson
On 9/18/2014 11:32 AM, Sudhir Khanger wrote: > What are your views on keeping .gnupg folder in cloud? I am working on > a threefold backup system - a local external drive, a local nas server > and a third-party cloud service like S3/CrashPlan. Backup will be > fully encrypted client side. My plan i

Keeping .gnupg folder in cloud

2014-09-18 Thread Sudhir Khanger
What are your views on keeping .gnupg folder in cloud? I am working on a threefold backup system - a local external drive, a local nas server and a third-party cloud service like S3/CrashPlan. Backup will be fully encrypted client side. My plan is to avoid complexity by backing up everything in hom

(OT) encrypting to expired certificates

2014-09-18 Thread Peter Lebbing
On 17/09/14 22:46, michaelquig...@theway.org wrote: > The discussion has been most entertaining and enlightening. And to think I blew a gasket because I grossly misinterpreted this sentence: > As a farm kid, the answer is a resounding "yes, and you should be > thanking me." Which I interpreted a