Can preferred order of decryption keys be specified?

tried and succeeds. Is there a way to specify a preferred decryption key (that is different from the default signing key)? Incidentally, does anybody know how to convince emacs EasyPG to pass --no-throw-keyids to GPG? :-) Thank you, Martin ___ Gnupg

Re: Public keys stored on different server

Hello Vincent, Ok - that is clear now. I never had the idea to get a "whole list" from a key server but I didn't understand why people let access their key only on their own website. Martin Thursday, February 2, 2023, 9:45:53 PM, you wrote: >> Could you please

Re: Public keys stored on different server

ever will be in accordance > with > our privacy policy. Could you please explain this, I don't understand really. So there are public and no public keys on the this key-server? Who decides that a key is public or non-public? Who or how can I request a non-public key? Martin pgpZGo

Re: Public keys stored on different server

by the key ID. It just seemed like a contradiction to me if a key for security reasons should be downloaded from a website with an insufficient certificate ;-) - -- Best regards, Martin -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEE92uV/w2x7WB1p4XLsdyR185C444FAmPaiooACgkQsdyR185C 444E1Af9Eb7h9K

Public keys stored on different server

k has a bad or strange https certificate... What are the reasons for such a procedure and what is the advantage? -- Best regards, Martin pgpUEqarpFiso.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnup

macos IKEv2 auth with yubikey

Hi, All, My name is Martin, and I'm from south China. I've invested nearly a month in searching for IKEv2 vpn auth with yubikey on macos. I have installed pgp-agent already. I try to choose the cert in yubikey and hopefully the pgp-agent could interact with yubikey, but failed to pr

Re: GnuPG 2.2.32 with libgcrypt 1.8.8

Hello Bernhard, Tuesday, October 26, 2021, 9:37:47 AM, you wrote: > Am Montag 25 Oktober 2021 17:01:15 schrieb Martin: >> But after "make" and "make install" I see the the GnuPG 2.2.32 doesn't use >> libgcrypt 1.8.8 but 1.8.5 (which was installed by

GnuPG 2.2.32 with libgcrypt 1.8.8

Hi I am really not a programmer ;-) but I tried to compile GnuPG 2.2.32 on my Ubuntu 20.04 system. Before I compiled libgcrypt 1.8.8 - seems to work, no error messages. So these libreriers are going to /usr/local/lib So I tell configure for GnuPG 2.2.32 to take this libgcrypt 1.8.8 files with .

Which keyserver

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi list Which keyserver do you recommend these days? I have hkps://keys.openpgp.org in gpg.conf - but it seems that there are missing a lot of public keys on this server. - -- Best regards, Martin -BEGIN PGP SIGNATURE

Re: how to suppress new "insecure passphrase" warning

- -- Best regards, Martin -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEE92uV/w2x7WB1p4XLsdyR185C444FAl9jgAcACgkQsdyR185C 445wzwf/QiBWBkH9UW6jzh7vbFbENQG39dBZTpK5TmG0BwRsdq72y4ccGpaCfZM9 02xSMeQ8ajPJ8luBH2cYHK+iBOQLlztl9yYj1crTYE+B0LBLWUMNlaH

Re: private-keys-v1.d and preserve-permissions

ugging if we don't look into the documentation early enough. Regards, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: private-keys-v1.d and preserve-permissions

s. > > Long shot: does your system support ACLs? Using ACL would be possible, but we are reluctant to do so, since it adds a second permissions layer that is only visible if you actively look for it. Regards, Martin ___ Gnupg-users mailing list Gnup

Re: private-keys-v1.d and preserve-permissions

we had to extend the permissions for the "private-keys-v1.d" directory to group access. Regards, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

private-keys-v1.d and preserve-permissions

k to 700. (I also checked, that the gpg.conf file is in fact used.) Where am I wrong here? Is the setting not what I need, or do I set it incorrectly, or do I test it incorrectly? And if the setting is not what I need, how can I prevent the permissions f

Re: gpg not able to find my secret key

On Fri, Aug 24, 2018 at 2:38 PM Damien Goutte-Gattat wrote: > > On 08/24/2018 07:47 AM, Martin T wrote: > > One more small question- in the output of "gpg --list-keys" or "gpg > > --list-secret-keys" I see two keys, but in the output of > > &quo

Re: gpg not able to find my secret key

t;gpg --list-secret-keys" I see two keys, but in the output of "gpg-connect-agent 'keyinfo --list' /bye" or "ls ~/.gnupg/private-keys-v1.d/" I see four keys with different hashes. Why is that so? Martin ___ Gnupg-u

gpg not able to find my secret key

secmem usage: 0/65536 bytes in 0 blocks $ What might cause this? thanks, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpg not able to find my secret key

On Thu, Aug 23, 2018 at 12:54 PM Martin T wrote: > > Hi! > > I reinstalled my workstation and moved ~/.gnupg directory from old > machine to new one. Gpg version in both workstations is 2.1.18. The > problem is, that in the new workstation, when I try to decrypt a file, >

Re: Hard to find alternate source of checksums

t; Il 09/06/2018 19:08, Jeff Martin ha scritto: >> For a fresh install of GnuPG, I was following the integrity check >> directions. I have no prior version for GnuPG. > Why not fetch some (unrelated) live distributions, possibly some older > ones and some newer ones? > > GPG i

Re: Hard to find alternate source of checksums

es. My DDG & Goole searches were not enough. On Mon, Jun 11, 2018 at 9:14 AM, Lee wrote: > On 6/11/18, NdK wrote: >> Il 09/06/2018 19:08, Jeff Martin ha scritto: >>> For a fresh install of GnuPG, I was following the integrity check >>> directions. I have no prio

Hard to find alternate source of checksums

tar.bz2", oddly. I'm not sure what makes that one special. Also, I felt I was relying too much on www.linuxfromscratch.org as my alternate source. Do you have any specific tips for how to find alternate checksum sources? Thanks. -- Jeff Martin __

Re: Kommentar: Efail ist ein Megafail für E-Mail-Verschlüsselung | heise online

Hello Matthias, Friday, May 18, 2018, 3:40:53 PM, you wrote: > Jürgen Schmidt is a dedicated OpenPGP hater. Be warned and/or just > ignore this comment. And again recommandatioin for Signal. It seems to be a PR campaign - but a very bad one. -- Best regards,

Re: Vulnerable clients (was: US-CERT now issuing a warning for OpenPGP-SMIME-Mail-Client-Vulnerabilities)

on Canonical Ubuntu for smartphones/tablets and UBports devices. To show that developers of clients take the situation seriously one example: Today I got an update for Android R2Mail2 which fixes the #efail problem. There's still a chance ;-) -- Regards Martin pgpZi5sBPmIY2.pgp Descripti

Re: Breaking MIME concatenation

ery* email user? But there the standard today IS that mails are HTML-written and contain links and pictures and so on. If GnuPG should be a tool for "everybody" HTML mail must be encrypted and decrypted correctly by the clients and GnuPG should give any important info

Re: gpg-agent 2.1 persistent socket between sessions

esses lingering but can potentially cause other problems. Martin [1] - https://www.freedesktop.org/software/systemd/man/logind.conf.html -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEXpvIcrLGPB3dYM2b2/3pjiVWvVwFAlnwuuIACgkQ2/3pjiVW vVzBhA//Z0F8mWp6z4ce9rFMi/9J0sm8u71/HZI4IIAOsZoaJ

Re: Unable to sign or decrypt with card

ore. I would suggest (if you haven't tried that already). To try a different machine and/or a different reader combos and see if the problem is not a trivial faulty reader. Regards, Martin -BEGIN PGP SIGNATURE- iQIzBAEBCgAdF

Re: Managing the WoT with GPG

also sprach Peter Lebbing [2017-06-23 17:56 +0200]: > There are two hard problems in computer science: Cache invalidation, > naming things, and off-by-one errors. I haven't heard that one in years. Lol. ;) > Martin, I think --no-auto-check-trustdb and a cron job will > already

Re: Managing the WoT with GPG

nature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Key corruption: duplicate signatures and usage flags

digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Key corruption: duplicate signatures and usage flags

ever a body is obliged to do. play consists of whatever a body is not obliged to do." -- mark twain spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.ne

Re: Managing the WoT with GPG

enc.es/ "the scientific paper in its orthodox form does embody a totally mistaken conception, even a travesty, of the nature of scientific thought." -- sir peter medawar spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc De

Re: Managing the WoT with GPG

two.sentenc.es/ "durch frauen werden die höhepunkte des lebens bereichert und die tiefpunkte vermehrt." - friedrich nietzsche spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___

Re: Managing the WoT with GPG

sentenc.es/ "convictions are more dangerous enemies of truth than lies." - friedrich nietzsche spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft

Re: Managing the WoT with GPG

-- lars wirzenius spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Key corruption: duplicate signatures and usage flags

spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Managing the WoT with GPG

uck.net/ | http://two.sentenc.es/ dies ist eine manuell generierte email. sie beinhaltet tippfehler und ist auch ohne großbuchstaben gültig. spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-polic

Key corruption: duplicate signatures and usage flags

ome/ssd/madduck/.tmp/cdt.p0R8ly/trustdb.gpg: trustdb created gpg: key 55C9882D999BBCC4: public key "Martin F. Krafft " imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 % gpg --list-keys !$ gpg --list-keys 0x55C9882D999BB

Managing the WoT with GPG

nothing without enough dead bodies. spamtraps: madduck.bo...@madduck.net digital_signature_gpg.asc Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

GnuPG 2.1.19 output

packet of type 12 in keybox gpg: skipped packet of type 12 in keybox gpg: skipped packet of type 12 in keybox gpg: skipped packet of type 12 in keybox gpg: skipped packet of type 12 in keybox ... BTW. Back to 2.1.19 because of problems with .20 and .21 on Windows -- Best regards, Martin

Re: Cannot encrypt to reenabled key after migration

e accessible ... gpg: waiting for file '.../gnupgHome/pubring.gpg' to become accessible ... gpg: waiting for file '.../gnupgHome/pubring.gpg' to become accessible ... Yes, exactly same problem on Windows 7 - 32bit Version. I swichted back to GnuPG 2.1.19 - and there this p

Registry entries

Hello list When I install the Windows the recent version of GnuPG gnupg-w32-2.1.20.exe which registry entries are made and where exactly with which value? Thanks. -- Best regards, Martin mailto:msch...@gmail.com ___ Gnupg

Re: ways to ensure that GPG public key belongs to right person in business to business communication

and asks Bob to confirm that it matches. I guess this provides reasonable security? thanks, Martin On Wed, Oct 26, 2016 at 11:51 PM, Daniel Kahn Gillmor wrote: > Hi Martin-- > > On Wed 2016-10-26 16:21:48 -0400, Martin T wrote: > >> let's say that Alice from company A

ways to ensure that GPG public key belongs to right person in business to business communication

c key belongs to right person in business to business communication? thanks, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: list revoked UIDs

Thanks! This did the trick. Martin On Tue, Oct 18, 2016 at 2:29 PM, Peter Lebbing wrote: > On 18/10/16 12:42, Martin T wrote: >> Is there a >> way to list that revoked UID? > > I think it's: > > gpg --list-options show-unusable-uids --list-keys <...> &

list revoked UIDs

Hi, I imported a public key from keyserver which has multiple UIDs and one of those UIDs is revoked. When I execute "gpg --list-keys " then I see only active UIDs and not that one revoked UID. Is there a way to list that revoked UID? Or wasn't that imported in the first place?

Re: regular update of all keys from a keyserver

Thank you for all the replies! Martin On Mon, Oct 17, 2016 at 7:52 PM, Brian Minton wrote: > > > On 10/17/2016 11:41 AM, Daniel Kahn Gillmor wrote: >> On Mon 2016-10-17 06:31:16 -0400, Martin T wrote: >> >>> I am aware that one can update all the keys in loca

regular update of all keys from a keyserver

Hi, I am aware that one can update all the keys in local-keyring from a keyserver using "gpg --refresh-keys". Are there any disadvantages to simply put this command into user crontab and execute for example once a day? thanks, Martin ___ G

Re: Attacks on encrypted communicxatiopn rising in Europe

y vocal about [1][2]. I think the answer here is to find a balance of some sort - i.e. keep vulnerabilities in rare cases for short periods of time and then disclose and patch them. However for that to work we need to trust the govt. to do the right thing. Which I think is pretty much the core issue t

GPG and Mailinglists using IBCPRE

without directly having the private key of the mailing list on the mailing list server. What do you think about IBCPRE. Regards --martin Mit freundlichen Grüßen --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Phys

GnuPG 2.0.30 console output charset

Hi list How to set GnuPG 2.0.30 configuration that the console output has the correct charset on Windows 7. The language is set to German in registry - but Umlauts are not displayed correctly. Thanks. m.s. ___ Gnupg-users mailing list Gnupg-users@gnu

Decryption error: open(CONOUT$) failed

Hello, since few days we face of an issue to decrypt files (.gpg) with GNUPG 1.4.9 We get error: *** gpg: fatal: open(CONOUT$) failed: The system cannot find the file specified. secmem usage: 0/0 bytes in 0/0 blocks of pool 0/32768 *** If issue w

Re: Question about getting started with PGP and smart cards

the above for test use but now I am using it every day at work, at home and on my laptop without any issues. I can sign, encrypt/decrypt as well as authenticate for SSH with a single smart card. Let me know if you need any additional information. Regards, Martin On Sat, 27 Feb 2016 at 17:44 A

Re: cipher used when both --encrypt and --symmetric is specified

Hi Peter, Thanks for the advice. I will have a look at the mailing list. For now I am happy that I have a working solution. Thank you and Vedaal for the help. Regards, Martin On Mon, 29 Feb 2016 at 11:12 Peter Lebbing wrote: > On 29/02/16 11:51, Martin Ilchev wrote: > > So CAS

Re: cipher used when both --encrypt and --symmetric is specified

and --cipher-algo is not given. So CAST5 is the preferred cipher for secret keys and is also the default for symmetric. On the other hand using --personal-cipher-preferences does not seem to apply to symmetric + public encryption. Is this by design? Regards, Martin On Fri, 26 Feb 2016 at 14:52

Re: Single GPG key and multiple yubikeys

ine user interface of gpg be different if the private keys reside on smartcards compared to a keyring in the filesystem? What do you think? Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - B

Re: gnupg-pkcs11 status & future

s each configured for a different USB device (scdaemon.conf) While imho pkcs#11 is ugly it really is a tool to gain interoperability while cleaning up a lot of mess (many people are confused with the current situation) and make encryption available to the masses. Kind Regards --martin konold -

Re: Single GPG key and multiple yubikeys

gent need to use two smartcards on the same computer and account I recommend to make use of scdaemon.conf and seperate GNUHOME directories. You may then differentiate between the two cards with the gpg -- homedir commandline option. Kind Regards --martin konold -- Dipl.-Physiker Martin Konold

Re: cipher used when both --encrypt and --symmetric is specified

CAMELLIA192 AES CAST5 CAMELLIA128 BLOWFISH IDEA 3DES personal-digest-preferences SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed s2k-digest-algo SHA512 keyserver hkps://hkps.pool.sks-keyservers.net keyserver-options ca-cert-file=/home/martin/.gnupg/sks

Re: Decrypt without importing key to keyring

the private key exclusivly on an OpenPGP Smartcard. This only requires a stub in the keyring which can be recreated on demand. Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - Beratende Inge

cipher used when both --encrypt and --symmetric is specified

ed data packet: length: unknown mdc_method: 2 gpg: encrypted with 1 passphrase gpg: using subkey 1234567890ABCDEF instead of primary key 1234567890ABCDEF gpg: encrypted with 4096-bit RSA key, ID 1234567890ABCDEF, created 2018-13-34 "Martin" gpg: public key decryption

Re: Nitrokey HSM and GPG

11 -new -key 0:10 -keyform engine -out cert.pem -text -x509 - days 3640 Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Registergericht: Amtsgericht Stuttg

Nitrokey HSM and GPG

fully works as expected but Nitrokey HSM fails with OpenPGgpg2 --card-status gpg: selecting openpgp failed: Card error gpg: OpenPGP card not available: Card error Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold

Re: basic identity mgmt

pagate the signature anyway. It's not a dealbreaker but it's > still a bit irritating. > > Thanks, > Lachlan > Without thinking a lot about it on my part, but wouldn't a separate signing sub-key help with this? Greetings Martin _

Re: What causes this bad signature

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/11/15 20:28, Sebastian Wiesinger wrote: > Hello, [...] > > sig!3 P0x58A2D94A93A0B9CE 2015-03-27 > never Sebastian Wiesinger sig-3 > 1 0x5E5CCCB4A4BF43D7 2015-11-14 never Governikus OpenPGP > Signaturservice (Neuer Personalaus

Re: libgrypt in Wikipedia? (help wanted)

e correct information in the libgcrypt Wikipedia entry. So please put in the missing information yourself, or someone or post them on my discussion page or via e-mail (I would appreciate an easy to c/p format) and I will enter them. Greetings Martin -BEGIN PGP SIGNATURE- Versi

Re: Is Open PGP or GnuPG or GPG possible on a Mac?

-1&q=mac+installer++site:lists.gnupg.org%2Fpipermail%2Fgnupg-users%2F2014 Looks also interesting for 2014. Maybe there will also be some results for 2015? Hope that gets you somewhere. Greetings Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYF

Re: Enabling and using ECC keys (any reason not to?)

milar for up to 3 different encryption methods. So especially when introducing new algorithms which might be tampered with, using e.g. an old style RSA Key as one layer and ECC as a second should help against this. Or am I missing something here? Greetings Martin

Re: German ct magazine postulates death of pgp encryption

y system? How many computers are out there where not even a single part of the hardware (and firmware) is proprietary? Where do you draw the line? If I would have to guess, I would say, the device you wrote that sentence with, falls in the category semi-proprietary... greetings Martin -BEGIN P

Re: Please remove MacGPG from gnupg.org due to serious security concerns

folks and somebody on the internet has, I would not blame GPGTools guys for doing it. Yes, it would be nice if one at least tried to contribute back to upstream and to work in an open manner, but at least they DO something, for what there is apparent need. Martin ___

Re: emulating smartcard with Nexus 5

non-Android-GUI issues. Martin -- Martin +372 515 6495 On Fri, Feb 13, 2015 at 1:55 AM, NIIBE Yutaka wrote: > Hello, > > Let me record a bit of history. > > On 02/13/2015 01:19 AM, Brian Minton wrote: >> I recently got a new Nexus 5, with NFC. Supposedly it supports ISO >

Re: Holidays

exchange rate are you at? And how do you treat multiple donations by the same person? :) Greetings Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAlSPMqIACgkQ/6vdZgk46si53wCgyNkYByjSaZkgwOP+/DmUlWgE cjQAoKK0eSbhDTmMyUStPJmMvhxV1f7L =N8kD -END

Re: How much information can be gleaned about a gpg key by possessing both plaintext and ciphertext?

o problem. google e.g.: "plain text attacks on gnupg site:gnupg.org" Greetings Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Why the software is crap

ust successfully created a private key, exported it, imported it with an outdated (portable) gnupg version and used it with no problems. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Why the software is crap

en). Maybe there is a difference between exporting the public part of a key and the private part. Anyway, enjoy your life. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Update on USG, Software, and the First Amendment

Am 27.10.2014 um 19:20 schrieb Robert J. Hansen: > Just received word back from a friend of mine who's a law professor > focusing in electronic civil liberties, and is a former Commissioner of > the FCC to boot. He's skeptical that ITAR/EAR enforcement will affect > U.S. hackers participating in l

Re: emails snowden and poitras

If you assume she is new to gpg I guess that is a wrong expectation. greetings Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: encrypting to expired certificates

Am 16.09.2014 um 16:41 schrieb Werner Koch: > On Tue, 16 Sep 2014 12:52, martin-gnupg-us...@dkyb.de said: > >> In Germany on food products you will find the word "Expiration Date" >> which literally means: "Don't eat me after that date." But there is a

Re: encrypting to expired certificates

me time after that date. And I think the same confusion is going on with respect to the expiration date in our context. And I am all for not overloading the meaning of words, so if I read expiration date than for me this is a dead line. If you mean "best before" than I would prefer if people say it like this. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: encrypting to expired certificates

e and prevents him from revoking the key. In this case preventing someone from sending you information which might harm your well being is a good thing.* Since the sender can't know how you use the expiration date I guess the more conservative approach is the safer one if you consider extreme cases l

Re: It's time for PGP to die.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 19.08.2014 um 21:16 schrieb MFPA: > Hi > > > On Monday 18 August 2014 at 8:21:06 PM, in > , Robert J. Hansen wrote: > > > >> No, the Fourth Amendment protects all people within U.S. borders >> equally. Americans get no special protections ove

Re: Fwd: It's time for PGP to die.

Am 18.08.2014 um 14:31 schrieb Robert J. Hansen: > On 8/18/2014 2:01 AM, Johan Wevers wrote: >> And who determines wether it has any "testimonial value"? > > Johan, we're entering paranoid fantasy here. If you truly believe the > whole of the USG is corrupt, and that our independent judiciary is

Re: FAQ change, final draft

Am 14.08.2014 um 04:32 schrieb Robert J. Hansen: > On 8/13/2014 5:22 PM, Martin Behrendt wrote: >> Because they probably will become frequently asked questions in the >> future. > > The questions experts think will be frequently asked are usually rarely > asked. :) >

Re: FAQ change, final draft

answer is not possible at this time. Because they probably will become frequently asked questions in the future**. ;) But I can understand if that is going to be dealt with, when we are at that point in time. regards Martin * What will be a good default key length and why e.g. ** maybe true for some

Re: Managing Subkeys for Professional and Personal UIDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 05.05.2014 12:55, schrieb Robert J. Hansen: > >> This is, again, rhetoric and not an argument. I explained that >> before. > > As I explained, you are choosing not to recognize the argument. > You honestly seem to think that "We are doing $A, s

Re: Managing Subkeys for Professional and Personal UIDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 04.05.2014 12:52, schrieb Robert J. Hansen: >> No, there are no good reasons. > > If that's an axiom in your system, then so be it. But let's not > go about thinking that's something you've deduced from principles. > Well I haven't heard any so

Re: Managing Subkeys for Professional and Personal UIDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 04.05.2014 10:30, schrieb Robert J. Hansen: > > Are there good business reasons for third party escrow of signing > keys? Quite probably. If you can think of a situation where an > autopen is appropriate, whether in business or in government, >

Re: Managing Subkeys for Professional and Personal UIDs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 03.05.2014 05:01, schrieb Robert J. Hansen:> > And regardless of whether it's a good practice or a bad one, I've > worked in businesses that have done exactly this -- so it's a > real-world example that demonstrates the occasional need for a > thi

Re: Access to www.gnupg.org only via TLS

header. [1] http://blogs.fsfe.org/gollo/2014/04/13/what-the-heartbleed-bug-revealed-to-me/ [2] https://www.ssllabs.com/ssltest/analyze.html?d=gnupg.org Thanks, Martin signature.asc Description: Digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: OpenPGP smartcard and RSA 8192 bit

No. 4k is the reasonable maximum. -- Martin +372 515 6495 On Sun, Mar 23, 2014 at 12:37 PM, -- -- wrote: > Hi! > > Just for the sake of curiosity, is it possible to store a 8192 bit RSA key > on the OpenPGP smart card? Two keys ? Three keys? > > Thank you, please in

Re: Multiple Subkey Pairs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 18.03.2014 19:34, schrieb Robert J. Hansen: > (1) Given how many flat wrong things get printed in the newspaper, > believing this reporting may not be wise. > While this in general is true, I really wonder why you say that in the current contex

Re: Multiple Subkey Pairs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 18.03.2014 15:01, schrieb Robert J. Hansen: > > My other position is that we have to be careful what we believe. > In these times it's tempting to see shadows and jump at them, > believing that we're seeing the bogeyman. We have to resist this >

Re: Multiple Subkey Pairs

Am 17.03.2014 17:54, schrieb Robert J. Hansen: >> That is an odd comparison. What does a statement about a fundamental >> law of physics which you can't change have to do with a statement >> about what you are doing, where you are perfectly free to do something >> else than you say? > > Try some v

Re: Multiple Subkey Pairs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 17.03.2014 11:34, schrieb Robert J. Hansen: >> The YYY (->a famous three letter agency) e.g. denies to archive >> content of YYY citizens mails. It is thus perfectly reasonable to >> assume it does so with all other ones. > > This is not a reason

Re: Multiple Subkey Pairs

eone at least also starts thinking about the problem and comes up with a good solution. Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEAREKAAYFAlMh+CkACgkQ/6vdZgk46sg1xwCgk3b9UyFmpOvAwoPQNIIXe1L+ /d4An1j5QQzTyKWVNNQhkyWd7+ejnrOG =Cas0 -END PGP SIGNATURE- __

Re: Multiple Subkey Pairs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 13.03.2014 16:42, schrieb ved...@nym.hush.com: > > On Thursday, March 13, 2014 at 8:03 AM, "Martin Behrendt" > wrote:Hi, > >> I want to achieve the following: 1. A Master signing key 2. A >> subkey signing/e

Multiple Subkey Pairs

t me can handle that, but also the people who sent me encrypted mails. (And if not, does it make sense to implement something like this in gnupg?) And a more general question: This approach generates some overhead so is there maybe a way to achieve something similar more easily? Thanks for ideas an

gpg 1.4.16 Windows - version info

Hi Just installed GnuPG 1.4.16 for Windows (on XP over here). gpg --version gpg (GnuPG) 1.4.16 Now I see in the signed messages that the version information about GnuPG is very short: Version: GnuPG v1 Bug or feature? -- Beste Grüsse, Martin mailto:msch

Re: Scute and SmartCard insertion/removal in Firefox

If you have a web server *and* a client where you can control the session cache and initiate a re-negotiation, Firefox will try to look at your token again. At least this was the case a while ago. -- Martin +372 515 6495 On Wed, Feb 5, 2014 at 12:58 PM, Urs Hunkeler wrote: > Hi, > >

Re: BoF at FOSDEM ?

Too bad I missed. Where did you get with the ECC discussion? m. -- Martin +372 515 6495 On Sat, Feb 1, 2014 at 10:32 AM, Kristian Fiskerstrand wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > [Seems my email from my cellphone got stuck in the moderator queue. So >

Re: [Announce] GnuPG launches crowdfunding campaign

omics and is therefore supposed to crash at some point. Choosing goteo was IMHO a good idea because their system is Free Software and I don't know if they even support BTC et al. Just my €0,02 Martin signature.asc Description: Digital signature _

  1   2   >