Re: ? Comments re key servers? re gpg-encrypted mail? re key servers carry many phony keys?

2016-12-27 Thread antony
On December 27, 2016 4:09:35 PM EST, Don Warner Saklad wrote: >What do you kind folks out there make of comments at >https://stallman.org/gpg.html > >"I'm told that key servers carry many phony keys claiming to be > mine. Here is info about which keys are really mine." > > >"Of course, to be rea

Re: ? Comments re key servers? re gpg-encrypted mail? re key servers carry many phony keys?

2016-12-27 Thread NdK
Il 27/12/2016 22:09, Don Warner Saklad ha scritto: > What do you kind folks out there make of comments at > https://stallman.org/gpg.html > >"I'm told that key servers carry many phony keys claiming to be >mine. Here is info about which keys are really mine." > > >"Of course, to be really su

RE: ? Comments re key servers? re gpg-encrypted mail? re key servers carry many phony keys?

2016-12-27 Thread Robert J. Hansen
> What do you kind folks out there make of comments at > https://stallman.org/gpg.html Completely orthodox. Certificates retrieved through the keyserver network should not be trusted until/unless verified. Some people are moving to embrace TOFU, which changes these rules somewhat. For my money,

? Comments re key servers? re gpg-encrypted mail? re key servers carry many phony keys?

2016-12-27 Thread Don Warner Saklad
What do you kind folks out there make of comments at https://stallman.org/gpg.html >"I'm told that key servers carry many phony keys claiming to be mine. Here is info about which keys are really mine." >"Of course, to be really sure which key is mine, you need to get my key fingerprint fro

Re: Unable to import Private Key

2016-12-27 Thread Damien Goutte-Gattat
On 12/27/2016 11:16 AM, MFPA wrote: The --export-secret-subkeys command will do what it says on the tin. That option would still generate a secret key packet for the primary key, it's just that this packet would not actually contain any key material. Here, what has been generated is a file c

Re: Unable to import Private Key

2016-12-27 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Monday 26 December 2016 at 9:21:37 PM, in , Damien Goutte-Gattat wrote:- > As far as I know, the only way to export a subkey > only is to explicitly > specify that subkey by its key ID with an appended > '!', The --export-secret-subkeys comm

Re: Unable to import Private Key

2016-12-27 Thread Guy Wyers
Thanks for the reply. At least I know where things stand now, which is not a good place :-( I guess this is another *fine* example of the principle that an insufficiently tested DR arrangement, will always break down when you need it. I'm still puzzled about this partial export, however. I'm quite