Sign/verify openssl RSA signatures

2015-10-04 Thread the2nd
Hi, i've googled a lot and i guess it is just not possible but i want to ask this list before giving up. Is it possible to create (and verify) PKCS1_PSS signatures with gpg that are compatible with openssl? The signatures are created with this commands: # Generate keys openssl genrsa -out p

Re: OpenPGP Signatures (was Re: How to get your first key signed)

2015-10-04 Thread Robert J. Hansen
> If that was what he meant to say, he didn't say it. Peter's right, and you're moving the goalposts. Please stop. > So, I'll make my question more general. Is anyone aware of a case in > which the validity or enforceability of an OpenPGP signature has been > argued? To repeat my answer: yes.

OpenPGP Signatures (was Re: How to get your first key signed)

2015-10-04 Thread joe . asmodeus
"Peter Lebbing" wrote: > On 04/10/15 17:04, joe.asmod...@sigaint.org wrote: >> Therefore, I agree that a blanket holding that all digital >> signatures are non-repudiable is unlikely. > > I think you're moving the goal posts. I think Rob says that he's unaware > of any > case where a specific digi

Is there a better way to change out of sync expiration dates?

2015-10-04 Thread Anthony Papillion
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello Everyone, I'm not sure how but I somehow set the expiration date of my encryption key and my signing key to different dates (different by a few months time). While I know this isn't "really" a problem, I just like to have both keys expire on t

How Crissy Lynn can unsubscribe

2015-10-04 Thread Michael A. Yetto
On Sat, 3 Oct 2015 14:23:28 -0400 Crissy Lynn wrote: >Please! For the 600th time! REMOVE ME FROM THIS MAILING LIST! You have been asking how to unsubscribe and many participants on this mailing list have answered you. However, the theory has been proposed that you are not reading the list and h

Re: Unsubscription Request (was: Re: How to get your first key signed)

2015-10-04 Thread Brad Rogers
On Sun, 04 Oct 2015 21:55:49 +0200 Peter Lebbing wrote: Hello Peter, >equally disrespectful if I hadn't been one of the people at least >trying. Whilst it's laudable that people try and help her, I doubt she's even _reading_ stuff from the list any more. *Seeing* it, yes (obviously). As such,

Re: Unsubscription Request (was: Re: How to get your first key signed)

2015-10-04 Thread Richard Höchenberger
Hello Peter, On Sun, Oct 4, 2015 at 9:55 PM, Peter Lebbing wrote: > I personally > find this statement disrespectful to the people who tried to help miss > Lynn, > when she is not very approachable and offers no more explanation as to > why she can't just unsubscribe than the following > you ce

Re: Unsubscription Request (was: Re: How to get your first key signed)

2015-10-04 Thread Peter Lebbing
On 04/10/15 20:05, Richard Höchenberger wrote: > I find the repeated explanations of how to unsubscribe extremely unhelpful, > bordering to disrespect, since it does not provide the kind of help this > users needs. Even though I might share your sentiment on the rest of your mail, I personally fin

Re: How to get your first key signed

2015-10-04 Thread Peter Lebbing
On 04/10/15 17:04, joe.asmod...@sigaint.org wrote: > Therefore, I agree that a blanket holding that all digital > signatures are non-repudiable is unlikely. I think you're moving the goal posts. I think Rob says that he's unaware of any case where a specific digital signature was argued to be non-

Unsubscription Request (was: Re: How to get your first key signed)

2015-10-04 Thread Richard Höchenberger
Hello everyone, On Sat, Oct 3, 2015 at 8:23 PM, Crissy Lynn wrote: > Please! For the 600th time! REMOVE ME FROM THIS MAILING LIST! so for whatever reason, this user is obviously unable to successfully unsubscribe from this mailing list. Will not any of the list admins/moderators have mercy and

Re: How can it be made even easier!?

2015-10-04 Thread malte
Quoting Don Saklad (2015-10-04 16:30:50) > How can it be made even easier!? CryptoParties are a good start from an educational standpoint. Whiteout.io and Pixelated are a good start from a technological standpoint. https://www.cryptoparty.in/location https://www.cryptoparty.in/parties/upcoming h

How can it be made even easier!?

2015-10-04 Thread Don Saklad
How can it be made even easier!? Trying to encourage M.D.'s to use it is met with complaints about not having time to learn about it. Set up is a too complicated sequence of steps that aren't entirely clear. The steps can get hampered where there aren't instructions that cover what to do when one

Re: How to get your first key signed

2015-10-04 Thread joe . asmodeus
"Robert J. Hansen" wrote: > Yes, many! Digital signatures are enforceable in U.S. courts. > > Non-repudiability, though, as far as I know has never been successfully > argued. More to the point, I don't think it could be. I assume that enforcebility is determined using the standards applied to

Re: How to get your first key signed

2015-10-04 Thread Antony Prince
On 10/02/2015 06:55 PM, Faramir wrote: > ... > Well, you don't really need your key signed for that... at least, > not the key with your name on it. You can make a key using the name > "mysoftwarename distribution key", and use it to sign the files. Once > people start using the software, they ma

Re: How to get your first key signed

2015-10-04 Thread Robert J. Hansen
> Are you aware of a court, anywhere in the world, which has considered the > issue? Yes, many! Digital signatures are enforceable in U.S. courts. Non-repudiability, though, as far as I know has never been successfully argued. More to the point, I don't think it could be.

Re: How to get your first key signed

2015-10-04 Thread joe . asmodeus
"Robert J. Hansen" wrote: > The idea that OpenPGP signatures are non-repudiable is a fashionable bit > of nonsense: I am aware of no court, anywhere in the world, which has > recognized OpenPGP signatures as being non-repudiable. > Are you aware of a court, anywhere in the world, which has consid

Re: How to get your first key signed

2015-10-04 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Saturday 3 October 2015 at 11:53:26 PM, in , Robert J. Hansen wrote: > If I commit a crime and it gets traced back to the > certificate we shared, then the authorities would have > to figure out which of us was using the certificate. This ma

Re: How to get your first key signed

2015-10-04 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Saturday 3 October 2015 at 1:04:55 PM, in , Guan Xin wrote: > The word "will" does not infer history. No, but talking about something that happened in the past does. (-; > You know by > reputation I meant personal reputation, It was clear