Re: ADMIN: Some mail addresses are now rewritten

2017-03-15 Thread Bill Broadley via Gnupg-users
On 03/11/2017 09:27 AM, Werner Koch wrote: > Hi! > > You may have noted that the From address has been rewritten to show the > list address instead of your address. In addition a reply-to header has > been set so that your address is also known. IMO reply should go to the send and reply-list/gr

Re: HTTPS keyservers (with SSL-keys recording)

2017-03-15 Thread Miroslav Rovis
On 170315-16:46+0100, Werner Koch wrote: > On Wed, 15 Mar 2017 10:14, miro.ro...@croatiafidelis.hr said: > > > keyserver hkps.pool.sks-keyservers.net:443 > > I guess we should better default to hkps:// if a scheme is not given. which is, IIUC, HTTPS key protocol, like hkp:// is HTTP key protocol.

Re: Security doubts on 3DES default

2017-03-15 Thread Robert J. Hansen
> --weak-digest SHA1 --disable-cipher-algo 3DES Yeah, but that's ... *bad*. Breaks most of the Web of Trust, makes most cert sigs meaningless, removes the fallback cipher ... I think this is a great example of a cure worse than the disease. :) Phil Pennock made a post a bit ago detailing his ex

Question about signing keys and trust.

2017-03-15 Thread Jamie H. via Gnupg-users
Hello! It's been a few years since I've messed with gpg, but I have an application that needs something kind of like distributed groups. Lets say I have: "key group" (which is owned by who-cares, it's a public key only that represents a group of people) I have a person, lets say William Smith

Need help: gpg: public key decryption failed: Wrong secret key used

2017-03-15 Thread Ramachandra Hebbar
Hello Experts, We are implementing PGP solution using GnuPG. We have hit one issue, below is the error, gpg: public key decryption failed: Wrong secret key used gpg: decryption failed: No secret key I'm trying to encrypt sample test message without using armor (--no-armor). I'm getting above mess

Re: HTTPS keyservers (with SSL-keys recording)

2017-03-15 Thread Werner Koch
On Wed, 15 Mar 2017 10:14, miro.ro...@croatiafidelis.hr said: > keyserver hkps.pool.sks-keyservers.net:443 I guess we should better default to hkps:// if a scheme is not given. I have not checked whether this is already the case. > I record SSL-keys all the time, and I believe every communicati

Re: GnuPG 2.1.19 crashing when listing keys, if tofu-default-policy is "ask"

2017-03-15 Thread Werner Koch
On Wed, 15 Mar 2017 12:11, jus...@g10code.com said: > https://bugs.gnupg.org/gnupg/issue2959 This bug was reported by dkg a month ago but we unfortunately missed to fix it for 2.1.19. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. pgpzc3eMl7Bal.pgp

Re: Security doubts on 3DES default

2017-03-15 Thread Werner Koch
On Tue, 14 Mar 2017 21:54, r...@sixdemonbag.org said: > So long as you understand GnuPG will not make any changes that break RFC > conformance... and dropping SHA1/3DES breaks RFC conformance. Well, it is possible to use --weak-digest SHA1 --disable-cipher-algo 3DES with gpg. Shalom-Salam,

Re: GnuPG 2.1.19 crashing when listing keys, if tofu-default-policy is "ask"

2017-03-15 Thread Justus Winter
Hi, MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> writes: > I have been having GnuPG crash with the following message when listing > keys:- > > gpg --list-keys > gpg: O j: Assertion "conflict_set" in get_trust failed > (/home/wk/b-w32/speedo/PLAY-release/gnupg-w32-2.1.19/g10/tofu.c:2787)

HTTPS keyservers (with SSL-keys recording), WAS: help

2017-03-15 Thread Miroslav Rovis
My reply is really to one issue of all, but the discussion is noteworthy, and also it took place 2 1/2 weeks ago, so I leave the whole email quoted. On 170228-00:35+0100, Damien Goutte-Gattat wrote: > Hi, > > On 02/27/2017 04:07 PM, r...@riseup.net wrote: > > I'll use my master key offline. Follo