Re: can i use gnupg in commercial application ?

2011-05-17 Thread Jeffrey Walton
On Tue, May 17, 2011 at 2:05 AM, Meir Yanovich wrote: > if yes , can i add it to my installer ? http://lmgtfy.com/?q=gnupg+license ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Best practice for periodic key change?

2011-05-05 Thread Jeffrey Walton
On Thu, May 5, 2011 at 4:10 PM, Doug Barton wrote: > On 05/04/2011 23:52, Andreas Heinlein wrote: >> >> We have a OpenPGP key which we use for signing our software releases. >> That key should be changed yearly and carry an expiration date to >> enforce this change. > > What are you trying to acco

Re: nothing so dramatic

2011-05-04 Thread Jeffrey Walton
On Thu, Apr 28, 2011 at 12:03 PM, M.R. wrote: > On 28/04/11 13:40, Johan Wevers wrote: >> >> I'm not so sure. Especially for human rights activists in, say, Syrie or >> Tibet, might not want the government to know when they are mailing with >> foreign journalists. > > Quite probably, but I do not

Re: Storing secrets on other people's computers

2011-05-04 Thread Jeffrey Walton
On Wed, May 4, 2011 at 10:24 PM, M.R. wrote: > On 03/05/11 15:50, Daniel Kahn Gillmor wrote: > >> Dropbox exposes your secret >> keys to dropbox employees (and anyone who can convince them to snoop): >> >> >> http://paranoia.dubfire.net/2011/04/how-dropbox-sacrifices-user-privacy-for.html > > That

Re: Is the OpenPGP model still useful?

2011-05-02 Thread Jeffrey Walton
On Mon, May 2, 2011 at 5:34 AM, B wrote: > > Simon Ward schrieb: >> On Fri, Apr 29, 2011 at 09:05:35PM +0200, B wrote: >>> By the way: Using OpenPGP with enigmail in Thunderbird, I miss a feature: >>> Usually the recipient rules work but if they fail (perhaps due to >>> background update of Thunde

Re: what are the sub keys

2011-03-23 Thread Jeffrey Walton
2011/3/23 Ingo Klöcker : > On Tuesday 22 March 2011, Jonathan Ely wrote: >> Enigmail allows only 1024, 2048 and 4096. I have never heard of that, >> but even still I would personally choose the largest key for the time >> being till RSA becomes obsolete. Is there anything larger than 4096 >> since

Re: Deniability

2011-03-23 Thread Jeffrey Walton
On Wed, Mar 23, 2011 at 3:06 PM, Mark H. Wood wrote: > On Tue, Mar 22, 2011 at 10:34:27PM -0400, Robert J. Hansen wrote: > [snip] >> My own dark suspicion is that what we have always thought of as >> "privacy" is nothing more than an inefficiency in information exchange. >>  So long as information

Re: Deniability

2011-03-22 Thread Jeffrey Walton
On Tue, Mar 22, 2011 at 6:11 PM, Jerome Baum wrote: > "Robert J. Hansen" writes: > >> On 3/22/11 5:42 PM, MFPA wrote: >>> Assuming you have nothing illegal to hide >> >> And in the context of that conversation it was clear that there was, in >> fact, something illegal to hide.  Quoting: "if the g

OT: BA jihadist relied on Jesus-era encryption

2011-03-22 Thread Jeffrey Walton
An IT worker from British Airways jailed for 30 years for terrorism offences used encryption techniques that pre-date the birth of Jesus Woolwich Crown Court was told that Bangladeshi Islamic activists who were in touch with Karim had rejected the use of common modern systems such as PGP or Tru

Re: GPG and PGP

2011-03-16 Thread Jeffrey Walton
On Wed, Mar 16, 2011 at 9:41 AM, wrote: > David Shaw dshaw at jabberwocky.com wrote on > Wed Mar 16 00:42:48 CET 2011 : > > >>GnuPG does the MDC by default whenever all the keys can handle it > > What kind of key can't handle it in gnupg? > > I sent messages to all key types, including v3 keys, u

Re: hashed user IDs [was: Re: Security of the gpg private keyring?]

2011-03-09 Thread Jeffrey Walton
On Wed, Mar 9, 2011 at 8:11 AM, Ben McGinnes wrote: > On 9/03/11 2:44 AM, Johan Wevers wrote: >> MFPA schreef: >> > Something that would not be necessary if the > underlying openPGP implementations could handle hashed > user IDs. >>> Isn't it much easier to use the key ID / signat

Re: "This key may be unsafe"

2011-03-07 Thread Jeffrey Walton
On Mon, Mar 7, 2011 at 4:03 PM, Charly Avital wrote: > GPG Keychain Access 0.8.4 shows a red warning 'This key maybe unsafe' > for *any* key with a length equal or inferior to 1024 bits. > > GPG Keychain Access 0.8.4 is a GUI for key management for Mac users. >

Re: Why do we use a different key to sign than to encrypt

2011-03-01 Thread Jeffrey Walton
On Tue, Mar 1, 2011 at 8:13 AM, Guy Halford-Thompson wrote: > Not GPG specific, but I was wondering if someone could point me in the > direction of some resources that explain why we use different keys to > sign and encrypt (for cases where the same key _could_ do both e.g. > RSA).  I cant seem to

Re: plateform supported ?

2011-02-28 Thread Jeffrey Walton
On Mon, Feb 28, 2011 at 12:42 PM, Benjamin Donnachie wrote: > On 28 Feb 2011, at 17:29, florent ainardi wrote: > > i have a simple question > > May I suggest that you consolidate all your queries into a single email? > Ben How about all lists? http://groups.google.com/group/cryptopp-users http:/

GPA -

2011-02-27 Thread Jeffrey Walton
Hi All, I recently installed GPA. I'm trying to locate a friend's public key by either name or email address. GPA appears to only offer Key ID (which I don't have). Does anyone have tricks for locating a key by name or email? Thanks, Jeff ___ Gnupg-us