Thunderbird dealing with signed messages and mailing lists [was: Re: Best practices for obtaining a new GPG certificate]

2021-03-23 Thread Daniel Kahn Gillmor via Gnupg-users
On Fri 2021-03-19 15:30:51 -0700, Mark via Gnupg-users wrote: > It also has issues with signed messages and lists. For example you > signed this message but it says "uncertain digital signature".  I don't > remember this being an issue in the older TB/Enigmail. Signed messages on mailing lists tha

Re: Best practices for obtaining a new GPG certificate

2021-03-23 Thread Daniel Kahn Gillmor via Gnupg-users
On Fri 2021-03-19 08:29:12 +0100, Werner Koch via Gnupg-users wrote: > You may also skip the menu thing and use > > gpg --quick-gen-key b...@example.com future-default I agree with Werner's recommendation of using --quick-gen-key and future-default. If you're going to provide an e-mail address-

Re: Weak encryption keys

2021-03-23 Thread Jacob Bachmeyer via Gnupg-users
Vincent Pelletier wrote: On Mon, 22 Mar 2021 17:32:14 -0500, Jacob Bachmeyer via Gnupg-users wrote: The difference is that you *know* an unencrypted key is lying around at risk of compromise, and you knowingly chose to take that risk when you chose to store the key unencrypted. Pard

Re: Weak encryption keys

2021-03-23 Thread Vincent Pelletier via Gnupg-users
On Mon, 22 Mar 2021 17:32:14 -0500, Jacob Bachmeyer via Gnupg-users wrote: > The difference is that you *know* an unencrypted key is lying around at > risk of compromise, and you knowingly chose to take that risk when you > chose to store the key unencrypted. Pardon my non-gpg-familiarity, but

Re: So long, and thanks for all the fish.

2021-03-23 Thread Jacob Bachmeyer via Gnupg-users
Robert J. Hansen via Gnupg-users wrote: I first heard of the GNU Project and the Free Software Foundation in 1995. For twenty-six years I've supported the FSF and FSFE in a variety of different ways. For these twenty-six years, Richard Stallman has been at the forefront of the FSF. In all th

Re: Weak encryption keys

2021-03-23 Thread joefresh--- via Gnupg-users
> Interestingly, when I tried searching the latest GnuPG code base (cloned from > github) > for the "Weak encryption key" error message, nothing showed up. > > $ "grep -iRl "Weak encryption key" gnupg > > It appears that the problem lies in libgcrypt, which refuses to set a key for this cipher

Re: So long, and thanks for all the fish.

2021-03-23 Thread Werner Koch via Gnupg-users
On Tue, 23 Mar 2021 14:34, Bernhard Reiter said: > restructured.) So yes, RMS had some influence over GnuPG. I don't think I've He has not more influence on GnuPG than on GNOME, which he claims to be the GNU desktop. GnuPG still shows the FSF copyright on Unix e as an appreciation for all the t

Re: Compile of gnupg-2.2.27 fails on t-keydb.c

2021-03-23 Thread Frank
Please run make V=1 there should be really some more output than just "syntax error". I need to see that to figure out where xlc bails out. I am also not aware of other reports from AIX users/ Here is a bit more (helpful) information loaded from gnupg.org: -rw-r-1 root system

Re: Weak encryption keys

2021-03-23 Thread Ingo Klöcker
On Dienstag, 23. März 2021 14:31:00 CET jsmith9810--- via Gnupg-users wrote: > Interestingly, when I tried searching the latest GnuPG code base (cloned > from github) for the "Weak encryption key" error message, nothing showed > up. > > $ "grep -iRl "Weak encryption key" gnupg > It's defined in

Re: So long, and thanks for all the fish.

2021-03-23 Thread Bernhard Reiter
Am Dienstag 23 März 2021 10:23:32 schrieb Robert J. Hansen via Gnupg-users: > Regardless of whether he officially has power, he clearly unofficially > has power. He's contacted me a few times over the years to insist on > changes to the FAQ, usually over incredibly silly details like saying > our

Re: Weak encryption keys

2021-03-23 Thread jsmith9810--- via Gnupg-users
> > I try to import this key manually (--import), gpg throws a "weak > > encryption key" error and refuses to import it. ...which I find > > Can you please paste the exact error message and the output of > "gpgconf --show-versions"? > > > Shalom-Salam, > >Werner > Sure. My gpgconf doesn't seem

Re: Compile of gnupg-2.2.27 fails on t-keydb.c

2021-03-23 Thread Werner Koch via Gnupg-users
On Sat, 20 Mar 2021 19:06, Frank said: > I am trying to compile gnupg-2.2.27 and it fails with "syntax error" > on g10/t-keydb.c. > I was yet unable to gather more informations, what is going wrong. > No line, statement or anything else is given. Please run make V=1 there should be really som

Re: Weak encryption keys

2021-03-23 Thread Werner Koch via Gnupg-users
On Mon, 22 Mar 2021 17:43, jsmith9810--- said: > I try to import this key manually (--import), gpg throws a "weak > encryption key" error and refuses to import it. ...which I find Can you please paste the exact error message and the output of "gpgconf --show-versions"? Shalom-Salam, Werner

We shall value email usage

2021-03-23 Thread Bernhard Reiter
Dear GnuPG community, email is a decentral standard for asynchronus communication * one-to-one messenging * closed groups * public discussions (via mailinglists) * trust anchor (as needed by many accounts on web-sites) There is a wealth of Free Software implementations and service providers,

Re: So long, and thanks for all the fish.

2021-03-23 Thread Robert J. Hansen via Gnupg-users
The FSFE is an independent sister organisation with a separate leadership, and the framework agreement FSFE has with FSF does not give a single person a special influcence or one of the organisations a special power over the other. Regardless of whether he officially has power, he clearly unoffi

Re: Compile of gnupg-2.2.27 fails on t-keydb.c

2021-03-23 Thread Bernhard Reiter
Hi Frank, Am Samstag 20 März 2021 19:06:41 schrieb Frank: > I am trying to compile gnupg-2.2.27 and it fails with "syntax error" > on g10/t-keydb.c. > I was yet unable to gather more informations, what is going wrong. > No line, statement or anything else is given. can you give the precise comman

Re: Weak encryption keys

2021-03-23 Thread Bernhard Reiter
Am Montag 22 März 2021 23:32:14 schrieb Jacob Bachmeyer via Gnupg-users: > I am assuming that there is some more severe problem with OpenPGP > Blowfish key wrapping, since the situation you describe would not > warrant the measures GPG has taken. Not know details about this one: Sometimes stuff g

Re: So long, and thanks for all the fish.

2021-03-23 Thread Bernhard Reiter
Dear Robert, Am Dienstag 23 März 2021 06:59:44 schrieb Robert J. Hansen via Gnupg-users: > None of us have to tolerate toxic leadership. We can always leave.  For > that reason, I'm stepping down as the FAQ maintainer. thanks for your contributions to GnuPG and its FAQ! (And I hope there will b