Re: Docs central, with 'Email Self-Defence'

2014-06-15 Thread John Clizbe
Kristy Chambers wrote: > Although some people would probably deny, that it's not the job > gnupg.org to provide a good tutorial about using gpg for e-mail-security > with some other gpg-related software like Enigmail+Thunderbird, I would > really appreciate it. Bad tutorials on the web reaffirm my

Re: Docs central, with 'Email Self-Defence'

2014-06-15 Thread Robert J. Hansen
> Is there really that much flux in the crypto world? It seems rather steady to > me. Things which seem stable stay stable, things which seem suspect, stay > suspect. Generally. Definitely. Keeping up-to-date with the most recent versions, with new features, with security advisories, etc. Imagin

Re: Docs central, with 'Email Self-Defence'

2014-06-15 Thread Peter Lebbing
On 15/06/14 23:27, Robert J. Hansen wrote: > keep everything up-to-date Is there really that much flux in the crypto world? It seems rather steady to me. Things which seem stable stay stable, things which seem suspect, stay suspect. Generally. Peter. -- I use the GNU Privacy Guard (GnuPG) in co

Re: Docs central, with 'Email Self-Defence'

2014-06-15 Thread Robert J. Hansen
>> I think providing an official, complete, >> easily-understandable, up-to-date, reviewed and >> qualitative documentation by experts for beginners and >> experts is absolutely necessary for security-software. >> Therefore GnuPG is in need of that. > > I'm not sure about "official" in this contex

Re: Docs central, with 'Email Self-Defence'

2014-06-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 14 June 2014 at 9:33:07 PM, in , Kristy Chambers wrote: > I think providing an official, complete, > easily-understandable, up-to-date, reviewed and > qualitative documentation by experts for beginners and > experts is absolutely n

Re: Docs central, with 'Email Self-Defence'

2014-06-14 Thread Kristy Chambers
I think providing an official, complete, easily-understandable, up-to-date, reviewed and qualitative documentation by experts for beginners and experts is absolutely necessary for security-software. Therefore GnuPG is in need of that. If I have a (superficial) look on the documentations, FAQs, HOW

Re: Docs central, with 'Email Self-Defence'

2014-06-12 Thread Daniel Krebs
Am 10.06.2014 16:38, schrieb Bernhard Reiter: > >Thus I've started > >http://wiki.gnupg.org/documentation > >and did a first entry for the new CC-BY-(SA) short guide from the FSF. > >I could use more critical review, so if you read it or other documents, > >please add a link or a comment. D

Re: Docs central, with 'Email Self-Defence'

2014-06-10 Thread raffa...@gmx.de
Dear Bernhard, hello everyone, On 06.06.2014 11:36, Bernhard Reiter wrote: > Thus I've started http://wiki.gnupg.org/documentation and did a > first entry for the new CC-BY-(SA) short guide from the FSF. I > could use more critical review, so if you read it or other > documents, please add a link

Re: Docs central, with 'Email Self-Defence'

2014-06-10 Thread Bernhard Reiter
Hi, On Sunday 08 June 2014 at 17:49:41, Suspekt wrote: > I have some links about key creation and gpg in general that I would > provide of course. the problem is, that I don't know if/how correct they > are because I am not that into gpg yet. Some blogposts are rather old, > which can mean they ar

Re: Docs central, with 'Email Self-Defence'

2014-06-10 Thread Mark H. Wood
On Tue, Jun 10, 2014 at 01:56:34AM +0200, Hauke Laging wrote: > Am So 08.06.2014, 20:59:41 schrieb Peter Lebbing: [snip] > > > I recommend that all qualified people do the same when encountering > > > bad articles. > > > > The problem lies in "qualified". I think the authors of the bad advice > >

Re: Docs central, with 'Email Self-Defence'

2014-06-09 Thread Hauke Laging
Am So 08.06.2014, 20:59:41 schrieb Peter Lebbing: > This one seems easy... leakage of the revocation certificate is much > more benign. > It all boils down to: "a safe backup" depends on what you are backing > up. That would be a good explanation of this aspect but that is usually not what you

Re: Docs central, with 'Email Self-Defence'

2014-06-08 Thread Peter Lebbing
On 08/06/14 20:34, Hauke Laging wrote: > "After creating the key create a revocation certificate, too." I still have > to be told why it shall be possible to have a safe backup of the revocation > certificate but impossible (or less possible) to have a safe backup of the > secret mainkey... This o

Re: Docs central, with 'Email Self-Defence'

2014-06-08 Thread Hauke Laging
Am So 08.06.2014, 18:51:39 schrieb Suspekt: > > There is a /lot/ of bad advice out there; I'd be wary of linking to > > it. > I understand that. But those links are out there and just by searching > on the internet you'll find a lot of some, because they seem to quite > popular on google... Maybe

Re: Docs central, with 'Email Self-Defence'

2014-06-08 Thread Suspekt
Am 08.06.2014 18:28, schrieb Peter Lebbing: On 08/06/14 17:49, Suspekt wrote: I have some links about key creation and gpg in general that I would provide of course. There is a /lot/ of bad advice out there; I'd be wary of linking to it. I understand that. But those links are out there and jus

Re: Docs central, with 'Email Self-Defence'

2014-06-08 Thread Peter Lebbing
On 08/06/14 17:49, Suspekt wrote: > I have some links about key creation and gpg in general that I would provide > of > course. There is a /lot/ of bad advice out there; I'd be wary of linking to it. There is no single best way, a lot of bad ways, and a lot of clashing outspoken opinions. In my

Re: Docs central, with 'Email Self-Defence'

2014-06-08 Thread Suspekt
Hi, I have some links about key creation and gpg in general that I would provide of course. the problem is, that I don't know if/how correct they are because I am not that into gpg yet. Some blogposts are rather old, which can mean they are no longer up to date but doesn't have to. I don't wan

Docs central, with 'Email Self-Defence'

2014-06-06 Thread Bernhard Reiter
Friends of OpenPGP, GnuPG, End-to-End encryption, in the last 18 months, people started writing more about GnuPG and its relatives. We need to keep the overview and if possible provide a central place where people can find the best documentation for them to read. This is a task which we can and