Re: published key security levels

don’t ask others to sign it; the only key I put into the web of trust is my high-security key. If the low-security key is compromised, can the attacker rename it (or otherwise fool people into thinking it’s my high-security key) without removing my (high-security) signature on the key? —Joel C. Sa

Re: 8192bit RSA keys

martin f krafft wrote: > ... 8192bit [keys]. http://xkcd.com/538/ —Joel Salomon signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: "Signature verification failed"

John Clizbe wrote: > Joel C. Salomon wrote: >>> Message was signed by tho...@bohnomat.de (Key ID: 0x61C7F5B569274BBB). >>> The signature is valid, but the key's validity is unknown. >> >> Hmm and double hmm. Is there someone else using Thunderbird+Enigmail &

Re: "Signature verification failed"

Thomas Bohn wrote: > On Jun 21, 2009, at 7:28 AM, Joel C. Salomon wrote: >> On some messages (e.g., this recent one from Thomas Bohn: >> ) I get the message, >> “Error - signature verification failed; click Pen icon for details”. > > I just noticed this thread, so I j

Re: "Signature verification failed"

Michel Messerschmidt wrote: > Hm, I get a good signature here: Ingo Klöcker wrote: > Same here (using KMail): > Message was signed by tho...@bohnomat.de (Key ID: 0x61C7F5B569274BBB). > The signature is valid, but the key's validity is unknown. Hmm and double hmm. Is there someone else using Thun

"Signature verification failed"

I’m using Thunderbird 2.0.0.21 + Enigmail 0.95.7 (20080808) with GnuPG 1.4.9 under Windows. On some messages (e.g., this recent one from Thomas Bohn: ) I get the message, “Error - signature verification failed; click Pen icon for details”. The error message from GnuPG is: OpenPGP Security Info

Re: GnuPG 2 under Windows

Joel C. Salomon wrote: > Is a build of GnuPG more recent than 1.4.9 available for Windows? To rephrase my question /per/ the subject line: Is there a build of GnuPG 2 available for Windows? —Joel Salomon signature.asc Description: OpenPGP digital signat

GnuPG 2 under Windows

Is a build of GnuPG more recent that 1.4.9 available for Windows? —Joel Salomon signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: ascii art envelope

Gregor Zattler wrote: > I do not know of a standard, but there is a nice ascii art for > signatures (see below). I like it! Here’s the Unicode version: ╭───╮ pub 1024D/8C6CA66E 2009-02-24 │╲ ◯───╥ ╱│ Joel C. Salomon │╱‵───′╲│ Using public key encryption is like s

Re: How to 'un-sign' a key?

Joel C. Salomon wrote: > I foolishly signed a key I had not verified well, and the signed version > is on a keyserver. How can I unsign it? > > I have tried the following (changing the key ID to 0xDEADBEEF): I tried the command again; not sure why I got a different result: > C:\

How to 'un-sign' a key?

Folks, I foolishly signed a key I had not verified well, and the signed version is on a keyserver. How can I unsign it? I have tried the following (changing the key ID to 0xDEADBEEF): > C:\Users\chesky>"c:\Program Files\GNU\GnuPG\gpg.exe" --edit-key 0xDEADBEEF > gpg (GnuPG) 1.4.9; Copyright (C)

Re: WinPT & Enigmail don't show the same keys

John W. Moore III wrote: > Joel C. Salomon wrote: > > I was under the impression that GnuPG kept track of everything, but I > > noticed that Windows Privacy Tray and Enigmail do not always show the > > same keys. > > > > Both are accessing the correct version of GP

WinPT & Enigmail don't show the same keys

I was under the impression that GnuPG kept track of everything, but I noticed that Windows Privacy Tray and Enigmail do not always show the same keys. Both are accessing the correct version of GPG (C:\Program Files\GNU\GnuPG\gpg.exe), and at least WinPT knows where the GnuPG keyrings are (C:\Users