Re: PGP/MIME (Was: One alternative to SMTP for email: Confidant Mail)

2015-03-25 Thread Xavier Maillard
Doug Barton writes: > On 3/25/15 11:08 AM, Bob (Robert) Cavanaugh wrote: >> Doug, >> Signature shows as an attachment "signature.asc". No evidence that PGP >> actions were envoked. Work forces use of Synaptic PGP, so I cannot tell if >> it is verified or not. > > Thanks Bob, that is interestin

Re: [cygwin] gpg-agent with ssh support ?

2015-03-12 Thread Xavier Maillard
Doug Barton writes: > On 3/12/15 2:59 AM, Werner Koch wrote: >> On Wed, 11 Mar 2015 18:23, dougb@dougbarton.email said: >> >>> PuTTY also has its own agent support, which works quite well. I'm not >>> sure why it's necessary to reinvent the wheel here. :) >> >> Because that integrates seemless w

Re: [cygwin] gpg-agent with ssh support ?

2015-03-11 Thread Xavier Maillard
Doug Barton writes: > Otherwise, there is an easy way to solve your problem on the Windows > platform, you should strongly consider it. I fear I do not understand. Did I miss something ? Off course I'd rather go the easy way ! :D Regards -- Xavier.

Re: [cygwin] gpg-agent with ssh support ?

2015-03-11 Thread Xavier Maillard
Doug Barton writes: > On 3/11/15 3:15 AM, Werner Koch wrote: >> The standard ssh client on Windows seems to be Putty; you may use it >> with the native GnuPG for Windows (i.e. Gpg4win) by using the option >> --enable-putty-support instead of --enable-ssh-support. > > PuTTY also has its own agent

[cygwin] gpg-agent with ssh support ?

2015-03-10 Thread Xavier Maillard
Hi all, On my workstation, I have installed cygwin and GPG4win which is bundled with a version of gpg-agent (cygwin comes whith oldies and no gpg-agent AFAICS). I enabled ssh support in the gpg-agent.conf file as usual and I clearly see the socket files for both GNUpg and SSH. When starting a cy

Re: How to send a key to a keyserver?

2015-03-01 Thread Xavier Maillard
Helmut Waitzmann writes: > So it's a problem with my http proxy? Seems like actually. -- Xavier. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: How to send a key to a keyserver?

2015-02-26 Thread Xavier Maillard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello Helmut Helmut Waitzmann writes: > gpg2 --verbose --keyserver hkp://pool.sks-keyservers.net --send-keys -- > 72ABFF0923A87CF22D0ED7C4FDEE765D017077F1 try without the -- stuff: gpg2 --verbose --keyserver hkp://pool.sks-keyservers.net --send

Re: Problem with PassPhrase in Batch.

2015-02-26 Thread Xavier Maillard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Mark, Mark Walter writes: > I have a pass phrase that contains an exclamation mark (!). I can > decrypt fine manually, however when I try to put this into a batch > file, and pipe the the pass phrase to the gpg command to decrypt > the file, it

Re: Double sign a document

2015-02-21 Thread Xavier Maillard
Hauke Laging writes: > Am Mi 18.02.2015, 21:29:40 schrieb Xavier Maillard: > >> Just a quick question: do I need to have both keypairs in my keyring >> ? I mean both my old secret key and my new secret key. > > Of course. Would be strange if you could make a signature

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-21 Thread Xavier Maillard
Peter Lebbing writes: > On 2015-02-19 18:16, Jonathan Schleifer wrote: >> I also like @ to hide useless output, but is downloading *and >> executing* from a remote location really something you should hide? >> Especially if everything else isn't hidden? > > I can understand you're pretty darn pi

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-21 Thread Xavier Maillard
Hi Ville, Ville Määttä writes: > I happen to use Mail so for a long time I’ve been using the GPGMail > plugin with a brewed[2] upstream GnuPG. I.e. *just one of the > things in the GPG Suite*. I’ve talked about this setup before in > the thread [3]. If one doesn’t use Apple Mail there is no reas

Re: Double sign a document

2015-02-18 Thread Xavier Maillard
Hi Jesper, Jesper Hess Nielsen writes: >> gpg -u -u --clearsign keytransition.txt > >> keytransition.signed2 >> > > woops, forget about the '> keytransition.signed2' part. Just running > with --clearsign will give you a keytransition.txt.asc file > automatically. Thnaks for that Jesper. Just

Double sign a document

2015-02-17 Thread Xavier Maillard
Hi, in order to announce my new GPG key< I have written a key transition document. I am at the step where I should/must sign it with both keys (old and new one). I can sign (inline) my document using this: gpg --output keytransition.signed --clearsign keytransition.txt This works for one GPG k

Re: MIME or inline signature ?

2015-02-15 Thread Xavier Maillard
MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> writes: >>> My preference is Inline: I want everything right there >>> in the message body where I can see it. > >> Exactly what is it you feel the over powering urge to >> see? > > If the message text is covered by a signature, I want to see the > s

Re: MIME or inline signature ?

2015-02-13 Thread Xavier Maillard
Peter Lebbing writes: > On 2015-02-13 15:07, Brian Minton wrote: >> if you have a 4096 bit RSA key, please dont sign inline. The >> signature block is >> ridiculously long. > > You'll find it is actually even an 8192 bit RSA key. Yes sorry. I should add a smaller key for that purpose ... Regar

Re: MIME or inline signature ?

2015-02-13 Thread Xavier Maillard
des-apare.cido...@autistici.org writes: >> Maybe I cannot offer a big rule for THE preferred way. Jerry is >> right, but maybe we HAVE to deal with recipients who have no >> influence to take a mail client which is capable to handle PGP/MIME >> sigbatures properly. Then it is also MY problem. > >

Re: MIME or inline signature ?

2015-02-12 Thread Xavier Maillard
Robert J. Hansen writes: >> in my quest of the perfect setup, I am asking myself what is the >> prefered way to sign a message: inline (like this one) or using a >> MIME header ? >> >> Is there a big thumb rule to respect ? > > https://www.gnupg.org/faq/gnupg-faq.html#use_pgpmime THank you for

Re: MIME or inline signature ?

2015-02-12 Thread Xavier Maillard
Jerry writes: > On Thu, 12 Feb 2015 23:46:33 +0100, Xavier Maillard stated: > >> Hello, >> >> in my quest of the perfect setup, I am asking myself what is the >> prefered way to sign a message: inline (like this one) or using a MIME >> header ? >&g

MIME or inline signature ?

2015-02-12 Thread Xavier Maillard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello, in my quest of the perfect setup, I am asking myself what is the prefered way to sign a message: inline (like this one) or using a MIME header ? Is there a big thumb rule to respect ? Regards - -- Sent with my mu4e -BEGIN PGP SIGNATURE-

Re: Sign key with externalized master key

2015-02-11 Thread Xavier Maillard
flapflap writes: > Xavier Maillard: >> >> Daniel Kahn Gillmor writes: >> >>> On Wed 2015-02-11 00:41:18 -0500, Xavier Maillard wrote: >>>> May I ask how one would sign public keys when a "master key" is >>>> stored onto an USB s

Re: Sign key with externalized master key

2015-02-11 Thread Xavier Maillard
Daniel Kahn Gillmor writes: > On Wed 2015-02-11 00:41:18 -0500, Xavier Maillard wrote: >> May I ask how one would sign public keys when a "master key" is >> stored onto an USB stick ? >> >> I followed instructions from [1]. Now I am in the process of >&

Sign key with externalized master key

2015-02-10 Thread Xavier Maillard
Hello, May I ask how one would sign public keys when a "master key" is stored onto an USB stick ? I followed instructions from [1]. Now I am in the process of announcing my key transition to all old signers *but*, as a last test, I just tested public signature with my "master key" and this is whe