Re: Key Management - BSI had send private key instead of public key

2021-11-16 Thread Christian Heinrich
Stefan, On Wed, 17 Nov 2021 at 11:47, Стефан Васильев via Gnupg-users wrote: > If this can happen to professionals then it would > tell me that there is a design flaw in the software > used. https://www.gnupg.org/gph/en/manual/r887.html is explicit that it will "export-secret-keys" I haven't co

Key Management - BSI had send private key instead of public key

2021-11-16 Thread Стефан Васильев via Gnupg-users
Hello, According to an article on the German site golem.de[1] Germany's BSI[2] had sent its private key instead of it's public key to a user via email, who requested its public key. I am only familiar with GnuPG command line usage and assume that they may use a GUI based program or add-on for an

Re: User id's without person's name, only email

2021-11-16 Thread Andrew Gallagher via Gnupg-users
On Tue, 2021-11-16 at 18:20 +0200, Teemu Likonen wrote: > Am I seeing a starting trend here? Do some people think that it is > better practice to have only have email address as user id? What > might be their reason? Or maybe it's not a trend and doesn't mean > anything. I got curious anyway. Add y

User id's without person's name, only email

2021-11-16 Thread Teemu Likonen
I have seen a couple of new OpenPGP keys which have only email addresses as user id's. No person's name at all. I also noticed that Notmuch Emacs email client was changed in recent months so that it shows only signer's email when the signature is verified with a valid key, even if key's user id's h