Re: Forbes article: The Encryption Debate Is Over - Dead At The Hands Of Facebook

2019-07-31 Thread Matthias Apitz
Can you please move this discussion elsewhere. The purpose of this list is: https://lists.gnupg.org/mailman/listinfo/gnupg-users About Gnupg-users GnuPG user help mailing list. The topic of this is list is help and discussion among users of GnuPG. This includes questions on how to script GnuPG

Re: Forbes article: The Encryption Debate Is Over - Dead At The Hands Of Facebook

2019-07-31 Thread Ryan McGinnis via Gnupg-users
In my personal opinion, Facebook has earned their reputation.  Their stance towards privacy has always publicly been "Uhh, what?  Privacy?  Uh, yeah... we love privacy!" while they fill their platform with dark patterns and extract every last bit of usable data you give them into something t

Re: Forbes article: The Encryption Debate Is Over - Dead At The Hands Of Facebook

2019-07-31 Thread Maksim Fomin via Gnupg-users
‐‐‐ Original Message ‐‐‐ On Wednesday, 31 July 2019 г., 17:36, Ryan McGinnis via Gnupg-users wrote: > Kicking the can down to the endpoints -- but really, haven't you always had > to trust your app / OS? Unless you coded or audited it yourself from top to > bottom and built your own ha

Re: Enigmail

2019-07-31 Thread Patrick Brunschwig
On 31.07.2019 14:26, David wrote: > Consider the fact that for 30 times Enigmail refused to accept the > passphrase for da...@gbenet.com > > I decided to send an encrypted email to Erich. When selecting his > private key there was no automatic tick in postmaster. But a tick in > Erich's public key

Re: Forbes article: The Encryption Debate Is Over - Dead At The Hands Of Facebook

2019-07-31 Thread Andrew Gallagher
On 31/07/2019 15:36, Ryan McGinnis via Gnupg-users wrote: > haven't you always had to trust your app / OS? Unless you coded or > audited it yourself from top to bottom and built your own hardware > (hah), there is always a level of trust required in the code/device Facebook are being expected to a

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Stefan Claas via Gnupg-users
Andrew Gallagher wrote: > On 31/07/2019 14:58, Stefan Claas via Gnupg-users wrote: > > an exportable 'blob' for the lsign > > command, which can be then exchanged and would not be compatible with > > key servers, in case someone would try to upload such a blob > > The keyservers (SKS at least) bl

Forbes article: The Encryption Debate Is Over - Dead At The Hands Of Facebook

2019-07-31 Thread Ryan McGinnis via Gnupg-users
Kicking the can down to the endpoints -- but really, haven't you always had to trust your app / OS? Unless you coded or audited it yourself from top to bottom and built your own hardware (hah), there is always a level of trust required in the code/device.  Trusting Facebook seems... unwise.  But

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Andrew Gallagher
On 31/07/2019 14:58, Stefan Claas via Gnupg-users wrote: > an exportable 'blob' for the lsign > command, which can be then exchanged and would not be compatible with > key servers, in case someone would try to upload such a blob The keyservers (SKS at least) blacklist lsign packets already, so you

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Stefan Claas via Gnupg-users
Werner Koch wrote: > On Sat, 20 Jul 2019 11:57, gnupg-users@gnupg.org said: > > > additional paramemter like --add-me for --lsign would make sense, for > >--quick-sign-key fpr [names] >--quick-lsign-key fpr [names] > > Directly sign a key from the passphrase

Re: Enigmail

2019-07-31 Thread Ralph Seichter
* da...@gbenet.com: > People say "Oh your settings are wrong" But the FAIL to give the RIGHT > SETTINGS!! And then go waffling on People don't fail you. Your entitlement issues do. Falsely stating software X cannot do Y when you are not using it right, expecting answers on a s

Re: Enigmail

2019-07-31 Thread Andrew Gallagher
On 31/07/2019 13:36, David wrote: > Enigmail always defaults to the first set of keys one created Enigmail will default to the first set of keys in your keyring that matches the selection criteria. Do you have more than one ID on each key? Do you have more than one key for each ID? This could be c

Re: Enigmail

2019-07-31 Thread David
Patrick Brunschwig: > On 31.07.2019 13:46, David wrote: >> Hello Erich, >> >> I did what you said - associated each email address with it's own key. >> I then shut down Thunderbird re-started and carried out the following test: >> >> Test One: >> >> I sent an encrypted and signed email to site-adm

Re: Enigmail

2019-07-31 Thread David
Patrick Brunschwig: > On 31.07.2019 08:56, David wrote: >> Patrick Brunschwig: >>> On 31.07.2019 00:36, David wrote: Andrew Gallagher: > >> On 30 Jul 2019, at 18:47, David wrote: >> >> Hello Stefan, >> >> I have three email accounts with their own keys - Enigmail does

Re: Enigmail

2019-07-31 Thread Patrick Brunschwig
On 31.07.2019 13:46, David wrote: > Hello Erich, > > I did what you said - associated each email address with it's own key. > I then shut down Thunderbird re-started and carried out the following test: > > Test One: > > I sent an encrypted and signed email to site-admin from postmaster. I > rec

Re: Enigmail

2019-07-31 Thread David
David: > Erich Eckner via Gnupg-users: >> Hi David, >> >> here is, how I had thunderbird + enigmail running for several years with >> two keys and without problems (I have switched away from thunderbird >> since one year ago, because it got too heavy and slow for my taste): >> >> For each sending a

Re: Enigmail

2019-07-31 Thread Patrick Brunschwig
On 31.07.2019 08:56, David wrote: > Patrick Brunschwig: >> On 31.07.2019 00:36, David wrote: >>> Andrew Gallagher: > On 30 Jul 2019, at 18:47, David wrote: > > Hello Stefan, > > I have three email accounts with their own keys - Enigmail does not > support this - you ha

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Werner Koch via Gnupg-users
On Sat, 20 Jul 2019 11:57, gnupg-users@gnupg.org said: > additional paramemter like --add-me for --lsign would make sense, for --quick-sign-key fpr [names] --quick-lsign-key fpr [names] Directly sign a key from the passphrase without any further u

Re: Enigmail

2019-07-31 Thread David
Erich Eckner via Gnupg-users: > Hi David, > > here is, how I had thunderbird + enigmail running for several years with > two keys and without problems (I have switched away from thunderbird > since one year ago, because it got too heavy and slow for my taste): > > For each sending address, I have

Re: Enigmail

2019-07-31 Thread Erich Eckner via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi David, here is, how I had thunderbird + enigmail running for several years with two keys and without problems (I have switched away from thunderbird since one year ago, because it got too heavy and slow for my taste): For each sending addres

Re: Enigmail

2019-07-31 Thread David
Robert J. Hansen: >> That's why I am considering other solutions. I have been with >> Thunderbird and Enigmail for over 20 years with one key pair - > > This is simply not possible, as Enigmail didn't exist until 2001. (It > took until about 2003 before it became really usable.) > > > _