Re: GnuPG (GPG) Problem

2006-08-25 Thread John Clizbe
Bo Berglund wrote: > On Sat, 19 Aug 2006 16:46:07 +0200, Ismael Valladolid Torres > <[EMAIL PROTECTED]> wrote: > >>John Clizbe escribe: >>> Just copy the keyring files. >> >>I store my private keyring and a public keyring containing only my >>public key on a pendrive, then in your gpg.conf: >> >>k

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-22 Thread Jonathan Rockway
> I am a smartcard programmer. Sure an OpenPGP card is just a standard > smartcard with special elementary files in its filesystem. Could I > make my own OpenPGP card from a common smartcard given I know its > administrative codes? Yup, that's what the "Open" in "OpenPGP Smartcard" means :) I'm n

RE: GnuPG (GPG) Problem

2006-08-22 Thread Musuvathy, Ashok
PROTECTED] On Behalf Of Werner Koch Sent: Tuesday, August 22, 2006 11:47 AM To: [EMAIL PROTECTED] Cc: gnupg-users@gnupg.org Subject: Re: GnuPG (GPG) Problem On Tue, 22 Aug 2006 07:21, Bo Berglund said: > Settings\) it is located in a subdir \Application Data\gnupg > and mine is completely em

Re: GnuPG (GPG) Problem

2006-08-22 Thread Werner Koch
On Tue, 22 Aug 2006 07:21, Bo Berglund said: > Settings\) it is located in a subdir \Application Data\gnupg > and mine is completely empty of any active lines. Seems like it is not That is just fine. > in use at all (because if it were every line should not be commented > out). Maybe the Windows

Re: GnuPG (GPG) Problem

2006-08-21 Thread Bo Berglund
On Mon, 21 Aug 2006 12:50:05 +0200, "Henk M. de Bruijn" <[EMAIL PROTECTED]> wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA512 > >On Sun, 20 Aug 2006 09:40:45 +0200GMT (20-8-2006, 9:40 +0200, where I >live), Bo Berglund wrote: > >... > >> I wonder about the gpg.conf file: >> Is it used at al

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-21 Thread Robert J. Hansen
Alphax wrote: > I don't use a flash drive or a smartcard, for the following reasons: ... and in a follow-up to my own follow-up, apparently Rainbow got bought out by SafeNet. The iKey is still available and the specs haven't changed from the last I used them some years ago. They're handy little

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-21 Thread Robert J. Hansen
Alphax wrote > - Flash drives are too prone to failures at bizzare moments > - Smartcards are largely experimental and don't have the instant > usability of a USB stick A few years ago Rainbow Technologies came out with a device they called the iKey. Smartcard with a USB connector, about the same

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-21 Thread Alphax
Robert J. Hansen wrote: > Janusz A. Urbanowicz wrote: >> You can't read a private key from the smartcard, but you can read it >> from the flashdrive. SC is a crypto processor + storage, flashdrive >> only storage. > > All of which is true. However, the bit to which I was replying was: > > "A sm

Re: GnuPG (GPG) Problem

2006-08-21 Thread Henk M. de Bruijn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sun, 20 Aug 2006 09:40:45 +0200GMT (20-8-2006, 9:40 +0200, where I live), Bo Berglund wrote: ... > I wonder about the gpg.conf file: > Is it used at all in Windows? > I looked at my own one at "C:\Documents and > Settings\\Application Data\gnupg

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-21 Thread Robert J. Hansen
Janusz A. Urbanowicz wrote: > You can't read a private key from the smartcard, but you can read it > from the flashdrive. SC is a crypto processor + storage, flashdrive > only storage. All of which is true. However, the bit to which I was replying was: "A smartcard is very convenient as far as

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-21 Thread Janusz A. Urbanowicz
On Sun, Aug 20, 2006 at 09:18:13AM -0500, Robert J. Hansen wrote: > Ismael Valladolid Torres wrote: > > A smartcard is very convenient as far as it's a multi application > > device, so you can store much other info apart from GnuPG keys, > > i.e. Mozilla passwords or such. > > ... I'm sorry, I'm s

Common gpg.conf to Linux and Windows, was Re: GnuPG (GPG) Problem

2006-08-20 Thread Ismael Valladolid Torres
Bo Berglund escribe: > So how does one do this on Windows I use Cygwin's gnupg so gpg.conf is at ~/.gnupg/gpg.conf just as usual on a UNIX computer. Below my gpg.conf, these are lines used on both Linux and Windows: default-cert-check-level 3 default-recipient-self keyserver pgp.rediris.es k

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Robert J. Hansen
Ismael Valladolid Torres wrote: > A smartcard is very convenient as far as it's a multi application > device, so you can store much other info apart from GnuPG keys, > i.e. Mozilla passwords or such. ... I'm sorry, I'm scratching my head over here trying to figure out how a flash drive doesn't als

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Ismael Valladolid Torres
Robert J. Hansen escribe: > Speaking for myself, I have doubts about the long-term security of > RSA/1024. I much prefer RSA/2048 instead. Thus, the OpenPGP card fails > to meet my own security policy... whereas storing a copy of my private > key on my USB dongle, with a high-security passphrase,

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-20 Thread Ismael Valladolid Torres
Jonathan Rockway escribe: > I would recommend that you don't do that. What if you lose the drive? > Then your private key is compromised. Do you have a revocation > certificate in a safe location? If not, you can't even tell anyone that > your private key has been compromised! Not good! Sure!

Re: GnuPG (GPG) Problem

2006-08-20 Thread Bo Berglund
On Sat, 19 Aug 2006 16:46:07 +0200, Ismael Valladolid Torres <[EMAIL PROTECTED]> wrote: >John Clizbe escribe: >> Just copy the keyring files. > >I store my private keyring and a public keyring containing only my >public key on a pendrive, then in your gpg.conf: > >keyring /path/to/pendrive/pubring

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-19 Thread David Shaw
On Sat, Aug 19, 2006 at 02:37:28PM -0500, Robert J. Hansen wrote: > > The OpenPGP smartcard is a much safer option, since it will not give > > up the private key (even if you have the password), and will lock > > itself after 3 incorrect password attempts. (And after 3 incorrect > > Admin PIN at

Re: Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-19 Thread Robert J. Hansen
Jonathan Rockway wrote: > I would recommend that you don't do that. What if you lose the > drive? Then your private key is compromised. Let's not use the word 'compromised'. Let's call it 'loss of control'. If I leave my wallet on my desktop for an hour while I go to a meeting, are my credit c

Don't store your key on a flash drive! [was Re: GnuPG (GPG) Problem]

2006-08-19 Thread Jonathan Rockway
I would recommend that you don't do that. What if you lose the drive? Then your private key is compromised. Do you have a revocation certificate in a safe location? If not, you can't even tell anyone that your private key has been compromised! Not good! The OpenPGP smartcard is a much safer o

Re: GnuPG (GPG) Problem

2006-08-19 Thread Ismael Valladolid Torres
John Clizbe escribe: > Just copy the keyring files. I store my private keyring and a public keyring containing only my public key on a pendrive, then in your gpg.conf: keyring /path/to/pendrive/pubring.gpg secret-keyring /path/to/pendrive/secring.gpg Using several different computers it works li

Re: GnuPG (GPG) Problem

2006-08-18 Thread John Clizbe
John wOnk3r wrote: > Hi, > > I have a problem. I have 2 computers and I set one up with GnuPG(GPG) with a > key. I use Thunderbird to send and receive encrypted email with no problems. > The second computer is not set with any key. I want to setup the second > computer with with the "Same" emai