Re: Generating 4096 bit key fails – why?

2015-10-30 Thread Felix E. Klee
On Tue, Oct 27, 2015 at 9:09 PM, Werner Koch wrote: > Please add > > --8<---cut here---start->8--- > debug 1024 > debug 2048 > log-file /this/is/my/scdaemon.log > --8<---cut here---end--->8--- > > to scdaemon.conf, kill

Re: "invalid option: --agent-program"

2015-10-30 Thread Daniel Kahn Gillmor
On Sat 2015-10-31 00:54:07 +0900, Andrew Gallagher wrote: > I'm using gnupg-agent 2.0.26-6 (jessie) and in the manual page for > gpg-connect-agent it says: > > --agent-program file > Specify the agent program to be started if none is running. > > But when I try it: > > $ gpg

Re: TOFU for GnuPG

2015-10-30 Thread Neal H. Walfield
At Fri, 30 Oct 2015 14:32:07 +, MFPA wrote: > On Friday 30 October 2015 at 11:51:27 AM, in > , Neal H. Walfield wrote: > > > > Sure. But your point is a red herring. There is > > *currently* no way to do this. However, the next > > version of the OpenPGP spec should have a way to do > > th

"invalid option: --agent-program"

2015-10-30 Thread Andrew Gallagher
I'm using gnupg-agent 2.0.26-6 (jessie) and in the manual page for gpg-connect-agent it says: --agent-program file Specify the agent program to be started if none is running. But when I try it: $ gpg-connect-agent --agent-program gpg-agent gpg-connect-agent:

Re: TOFU for GnuPG

2015-10-30 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 30 October 2015 at 11:51:27 AM, in , Neal H. Walfield wrote: > Sure. But your point is a red herring. There is > *currently* no way to do this. However, the next > version of the OpenPGP spec should have a way to do > this. My po

Re: TOFU for GnuPG

2015-10-30 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 29 October 2015 at 2:06:51 PM, in , Neal H. Walfield wrote: > When you verify a > message from some user for the first time, GnuPG saves > the binding between the user id (actually, the > normalized email address) and the key. The

Re: TOFU for GnuPG

2015-10-30 Thread Andre Heinecke
Hi, On Thursday 29 October 2015 22:28:54 Neal H. Walfield wrote: > At Thu, 29 Oct 2015 18:48:43 +0100, > > Johannes Zarl-Zierl wrote: > > Out of curiosity: Does the TOFU implementation for gpg already allow for > > key transition statements / is this planned for some point in the future? > Unfort

Re: TOFU for GnuPG

2015-10-30 Thread Neal H. Walfield
At Fri, 30 Oct 2015 12:06:14 +, MFPA wrote: > On Thursday 29 October 2015 at 2:06:51 PM, in > , Neal H. Walfield wrote: > > > > When you verify a > > message from some user for the first time, GnuPG saves > > the binding between the user id (actually, the > > normalized email address) and the

Re: TOFU for GnuPG

2015-10-30 Thread Neal H. Walfield
At Fri, 30 Oct 2015 11:43:28 +, MFPA wrote: > On Thursday 29 October 2015 at 9:28:54 PM, in > , Neal H. Walfield wrote: > > > > > Unfortunately, it doesn't. This is because there is > > currently no standard way to communicate the id of the > > new key. I've proposed a solution for this >

Re: TOFU for GnuPG

2015-10-30 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thursday 29 October 2015 at 9:28:54 PM, in , Neal H. Walfield wrote: > Unfortunately, it doesn't. This is because there is > currently no standard way to communicate the id of the > new key. I've proposed a solution for this Wouldn't a sign

Re: TOFU for GnuPG

2015-10-30 Thread Werner Koch
On Thu, 29 Oct 2015 17:23, m...@dabpunkt.eu said: > isn’t it a little bit problematic that GPG now logs how often I received > emails by someone else? Well, you MUA does it already. The IMAP server of your provider also has this information, and, worst of all, your responsible surveillance agenc