Re: trust-model and federated lookups

2021-10-25 Thread Phil Pennock via Gnupg-users
On 2021-10-25 at 15:12 +0200, Neal H. Walfield wrote: > This absolutely makes sense. One way to model this in the web of > trust is to imagine that you have a "WKD key," which you consider a > partially trusted introducer, and which certifies keys that you > retrieve via WKD. Practically, it's a

GnuPG 2.2.32 with libgcrypt 1.8.8

2021-10-25 Thread Martin
Hi I am really not a programmer ;-) but I tried to compile GnuPG 2.2.32 on my Ubuntu 20.04 system. Before I compiled libgcrypt 1.8.8 - seems to work, no error messages. So these libreriers are going to /usr/local/lib So I tell configure for GnuPG 2.2.32 to take this libgcrypt 1.8.8 files with .

Re: trust-model and federated lookups

2021-10-25 Thread Neal H. Walfield
Hi Phil, On Fri, 22 Oct 2021 17:00:11 +0200, Phil Pennock via Gnupg-users wrote: > When evaluating the trust we have in the identity attached to a key, I > often see "WARNING: We have NO indication whether the key belongs to the > person named as shown above"; at the same time, `--with-key-origin`

Re: Why does one machine allow me to use two yubikeys simultaneously connected, while another only allows one?

2021-10-25 Thread Bernhard Reiter
Hi Christian, Am Freitag 22 Oktober 2021 15:24:27 schrieb Christian Chavez via Gnupg-users: > Anyone got any suggestions on how to debug this? if you swap in the elder versiong of GnuPG, you could conclude that it is indeed the change of behaviour between the versions. If so you could find out

Re: trust-model and federated lookups

2021-10-25 Thread Bernhard Reiter
Hi Phil, Am Freitag 22 Oktober 2021 17:00:11 schrieb Phil Pennock via Gnupg-users: > I think what I _want_ is `trust-model pgp+federated+tofu`, which means, > in order: (1) any sigs from the WoT; (2) origin information from the > key, if the origin shows the key was safely retrieved from a federat