How to detect patched versus bugged gpg binary

2016-09-05 Thread Mike Ingle
Question about GPG versions: Due to CVE-2016-6313, I put out a new version of Confidant Mail where the Windows and Mac binaries include GPG 1.4.21. I also put in a pop-up dialog to warn if someone uses it with a pre-1.4.21 version of GPG. However, Debian and Tails 2.6rc1 have patched 1.4.18 ins

Re: Key import issues

2016-09-05 Thread Daniel Kahn Gillmor
On Mon 2016-09-05 06:43:30 -0400, A.L.E.C wrote: > A few users have (different) problems with importing secret keys > generated by OpenPGP.js. For me it works. Could anyone explain why gpg > exits with code 2 and what exactly these errors mean? > > (gnupg 2.0.28 in this case) > ERROR: gpg: key FF0A

Re: I think that's a false dichotomy

2016-09-05 Thread Johan Wevers
On 05-09-2016 0:45, Robert J. Hansen wrote: >> Do I smell a little bit of a Stockholm syndrome here? > > The Stockholm syndrome is half-pop science and half-real. I know what it is. You have obviously worked too much with those forces in law enforcement that prefer that citizens can't keep any s

Key import issues

2016-09-05 Thread A.L.E.C
A few users have (different) problems with importing secret keys generated by OpenPGP.js. For me it works. Could anyone explain why gpg exits with code 2 and what exactly these errors mean? (gnupg 2.0.28 in this case) ERROR: gpg: key FF0A6901: secret key imported ERROR: gpg: assuming bad signature