Re: File perms for conf files

2017-01-02 Thread Daniel Kahn Gillmor
On Sat 2016-12-31 14:59:48 -0500, Robert J. Hansen wrote: >> I'm now at the point where I need to restore files >> from a zip archive, and part of that means ensuring I have the correct >> POSIX permissions on each file. > > I'm going with 0x0644 (-rw-r--r--) on the .conf files, 0x0755 > (-rwxr-xr-

Re: Counterarguments Supporting GnuPG over Off The Record (OTR)

2017-01-02 Thread Lou Wynn
The author's stand is hilarious to me. He is "My day-to-day work is in the field of information security and especially incident handling, analysis and response. " That's is to say, he's a security expert. But he compares himself with Johnny by quoting "Why Johnny Can’t Encrypt” Actually, there

Counterarguments Supporting GnuPG over Off The Record (OTR)

2017-01-02 Thread Christian Heinrich
https://www.foo.be/2016/12/OpenPGP-really-works outlines a number of counter-arguments in support of GnuPG over OTR chat app and other alternatives. -- Regards, Christian Heinrich http://cmlh.id.au/contact ___ Gnupg-users mailing list Gnupg-users@gnup

Re: export encryption (subkey) only?

2017-01-02 Thread Lou Wynn
On 01/02/2017 11:26 AM, Christopher Beck wrote: > > Hi Lynn, > > > well, it is possible. There is an option for exporting only subkeys: > > gpg --output secret-subkeys --export-secret-subkeys SUBKEYID! > > It is important to use the exclamation mark at the end of the subkey-id! > > Instead of this

Re: export encryption (subkey) only?

2017-01-02 Thread Christopher Beck
Hi Lynn, well, it is possible. There is an option for exporting only subkeys: gpg --output secret-subkeys --export-secret-subkeys SUBKEYID! It is important to use the exclamation mark at the end of the subkey-id! Instead of this: how about a company-key for trust-signing the exployees keys? Th

export encryption (subkey) only?

2017-01-02 Thread Lou Wynn
Hi, I'm developing a key management solution for an organization. For an employee, I'd like to generate two keys: one for signing and the other for encryption. In my proposed solution, the encryption key should be backed up in an organizational central server for auditing purpose, and the signing