* Doug Barton [140430 10:05,
mID <5360ae82.6070...@dougbarton.us>]:
> On 04/30/2014 12:41 AM, Werner Koch wrote:
> >Hi,
> >
> >I have changed the website setup so that any plain text access to
> >www.gnupg.org is redirected to https://www.gnupg.org . Strict Transport
> >Security (HSTS) has al
* Richard Ulrich [131219 13:47,
mID <1387457142.1836.18.camel@XPS13dev>]:
> As this is about a crypto project, wouldn't it be adequate to accept
> payments in crypto currencies?
I wouldn't consider this a priority. Bitcoin violates one of the
fundamental laws of economics and is therefore sup
* Sam Tuke [131030 13:18,
mID <5270e670.3070...@gnupg.org>]:
> Hi all,
>
> I'm working with Werner to promote GnuPG and raise awareness. To that end
> we're
> collecting quotes from users - endorsements from people who know and trust
> GPG,
> people like you.
>
> If you want to help us, se
Hi,
I'm currently trying to do a smal script that sends automated e-mail
messages on a regular basis. I want to sign those e-mails and since mutt
does not allow to use it's OpenPGP features in non-interactive mode, I
try to at least have these messages signed using inline PGP.
For this, I use the
* Paul Hartman [120102 19:35,
mID ]:
> Crypto-Stick website states that it supported 4096-bit keys when using
> gnupg 2.0.18, and my signing and encryption subkeys on the card are in
> fact already 4096 bits, but they were created with gnupg on my PC and
> then transferred to the card, whereas
* Paul Hartman [120102 08:52,
mID ]:
> Hi,
>
> I got a GPF CryptoStick 1.2 yesterday and have successfully added my
> new signing and encrypting subkeys to the card using GPG 2.0.18 and
> using it without trouble so far for those purposes. However, when I
> tried to create an authentication k
* Robert Holtzman [111018 21:43,
mID <20111018185035.gb4...@cox.net>]:
> The greatest hindrance to widespread adoption is the phrase I often
> hear..."I've got nothing to hide" It drives me up a wall.
+1
Martin
smime.p7s
Description: S/MIME cryptographic signature
_
* David Robertson [110903 11:18,
mID <4e61eaae.20...@gmail.com>]:
> Hello,
> I've just bought myself a Gemplus/Gemalto GemPC twin USB smartcard
> reader and a V2.0 OpenPGP card. I'm running Debian Squeeze. I've set up
> udev rules as described here
> http://www.gnupg.org/howtos/card-howto/en/s
* Werner Koch [110831 08:45,
mID <877h5uozaa@vigenere.g10code.de>]:
> On Tue, 30 Aug 2011 20:40, go...@fsfe.org said:
>
> > AFAIR, 3072 bit keys have to be generated on the card. If you use
> > off-card generation, you are limited to 2048 bits.
>
> Really? That would be a bug.
I had thi
Dear Richard,
* Richard [110830 20:30,
mID ]:
> Hello,
>
> for security reasons, I have decided to migrate my most important
> subkeys to smartcards. I have a number of questions regarding the
> transfer/migration.
I think this is a good decision.
> a) I've bought two OpenPGP smartcards (v
Hi,
* patric...@lavabit.com [110502 16:50,
mID <7206.205.174.22.25.1304347651.squir...@lavabit.com>]:
> Hi,
>
> I have question on key management and was looking for some feedback. My
> issue is that I like the idea of having a Master signing key with no
> expiration date and I want to stor
* Todd A. Jacobs [110417 17:14,
mID ]:
> I'm not sure how I'm supposed to get GPG to automatically retrieve
> keys for signatures when validating a key. I'm currently running:
>
> gpg --keyserver-options auto-key-retrieve -kvv FBB75451
>
> which doesn't do what I expect. I get a whole bu
* David Shaw [110321 20:28,
mID <387f8326-47af-419e-a9a7-7c37d048a...@jabberwocky.com>]:
> On Mar 21, 2011, at 3:02 PM, Mike Acker wrote:
>
> > Scenario thus far:
> > • Tom Newguy joined my group
> > • Tom created a keypair and sent his PUBLIC key to me
> > • I have approved his m
Hi,
* Remco Rijnders [110321 07:35,
mID <412.a...@winter.webconquest.com>]:
> While I fully agree on bottom posting being preferred, I wonder if it's
> not a lost battle already. People quoting 'properly' are in such a
> minority that I don't think this can be changed around anymore. Of cou
Hi,
* Jonathan Ely [110320 22:18,
mID <4d866ead.9080...@gmail.com>]:
> Really? For me, it is much easier to access the newest reply instead of
> using the Down Arrow key to find it. Gmail always worked the same way
> for me.
You might want to read [1,2,3].
[1] https://wiki.fsfe.org/Fellows/
* Andrew Long [110317 21:47, mID
<7871bbee-1f8d-4efc-b0f3-9a17ec4ce...@mac.com>]:
> Anyone else having problems accessing pool.sks-keyservers.net? I've
> tried pointing nslookup at a couple of the root DNS name servers and
> get DOMAIN (not known)
By now, I at least get NS records again, but
* Robert J. Hansen [110227 20:28]:
> > How about "inline confuses users who don't know anything about OpenPGP"?
>
> 1. Why are you sending them signed emails anyway?
I sign *all* my e-mail except for messages sent from my mobile (in that
case, my signature tells the receiver why the message is
* David Tomaschik [110227 19:22]:
> How about "inline confuses users who don't know anything about OpenPGP"?
100% agreed. Thank you!
Martin
pgpOXtxwgzgho.pgp
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.g
* Grant Olson [110227 04:11]:
> I usually just leave it in until I leave the computer for lunch or a
> meeting or whatever.
Same here, but I always take the card with me if I leave the room.
> One thing I didn't realize at first, is that once you've unlocked either
> your encryption or authentic
* Todd A. Jacobs [110227 04:02]:
> Here are the steps I needed to take under Ubuntu 10.10 to get this
> particular reader working properly as a mortal user.
You could also have run the script [1] linked from the only up-to-date
OpenPGP smartcard howto [2] I'm aware of.
[1] http://download.fsfe.o
* Doug Barton [110227 05:30]:
> If you look at the characteristics of the actual messages encrypted mail
> is very similar whether it's in-line or MIME. It's signed messages that
> make things interesting because the signature in a MIME message is
> actually (sort of) an attachment but also sor
* Avi [110225 19:21]:
> For those of us who use webmail, inline signatures are rather
> useful.
There are webmail applications supporting PGP/MIME. If yours doesn't, it
is not a good one. Inline signatures are not a good thing IMHO.
Martin
pgpPpk4wPE5Xj.pgp
Description: PGP signature
_
* Daniel Kahn Gillmor [110225 18:31]:
> On 02/25/2011 12:11 PM, Martin Gollowitzer wrote:
> > * Patrick Brunschwig [110225 10:10]:
> >> The only mail client on Android I know of to handle OpenPGP messages is
> >> K9 (together with APG). But K9 only supports inline-PGP,
* Robert J. Hansen [110225 07:47]:
> > There are good reasons to prefer a PGP/MIME and S/MIME signature
> > standards over inline PGP.
>
> And vice-versa. In inline's defense, it *works*, and PGP/MIME often
> doesn't.
Maybe one should think about *why* this is the case. Nevertheless, your
state
* Patrick Brunschwig [110225 10:10]:
> On 25.02.11 07:43, Robert J. Hansen wrote:
> > On 2/24/11 10:15 PM, Daniel Kahn Gillmor wrote:
> >> my colleague is using the application named "email", version 2.2.2 on a
> >> stock 2.2.1 motorola droid.
> >
> > My problem is reproducible on a stock Droid X
Hi Werner,
* Werner Koch [110119 19:31]:
> I'd like to see a feature in MUAs to wrap the entire mail as presented
> in the composer into a message/rfc822 container and send the actual
> message out with the same headers as in the rfc822 container. This
> allows to sign the entire mail including
* freej...@is-not-my.name [110113 11:35]:
> P.S. Robert, how about trimming your line lengths!
Apple Mail sucks at this ;)
Martin
smime.p7s
Description: S/MIME cryptographic signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gn
Hi all,
Has anyone experienced problems with the most recent version of
pcsc-lite (1.6.6) when using an OpenPGP smartcard with GnuPG? My card
reader, a Cherry ST-2000U stopped working after I updated my Gentoo
system recently (while my SCR335 still works). I tried to do some
debugging and scdaemon
Hi,
* jimbob palmer [110111 12:05]:
> In Firefox I can sign or encrypt or encrypt+sign an e-mail.
>
> In what case would I want my encrypted emails also signed? Does it
> provide any additional benefit over a pure encrypted email?
A digital signature is useful so the sender can check if that me
29 matches
Mail list logo
