Re: Starting with gnupg

2008-08-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bill Royds escribió: > > On 4-Aug-08, at 05:54 , Faramir wrote: > >> Wait... it seems I have been very wrong about the subject... does it >> means I don't need to install certificates to enable sftp? I know this >> is turning off-topic, so, can yo

Re: Starting with gnupg

2008-08-04 Thread Bill Royds
On 4-Aug-08, at 05:54 , Faramir wrote: Wait... it seems I have been very wrong about the subject... does it means I don't need to install certificates to enable sftp? I know this is turning off-topic, so, can you please give some source of info to learn how to make sftp work? I already searche

Re: Starting with gnupg

2008-08-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert J. Hansen escribió: > Faramir wrote: >> Some servers are hard to configure to use sftp (if possible at all)... > > This means you need to find a competent sysadmin and/or hosting > provider. If your sysadmin says it's hard to configure the s

Re: Starting with gnupg

2008-08-04 Thread Robert J. Hansen
Faramir wrote: > Some servers are hard to configure to use sftp (if possible at all)... This means you need to find a competent sysadmin and/or hosting provider. If your sysadmin says it's hard to configure the server to use ssh/scp/sftp, fire your sysadmin and get a competent one. If your hosti

Re: Starting with gnupg

2008-08-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert J. Hansen escribió: > Faramir wrote: >> If he is using ftp to upload the files... standard ftp sends username >> and password unencrypted... so it could be sniffed... ... > telnet and ftp are antique protocols that have much better replacement

Re: Starting with gnupg

2008-08-03 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John W. Moore III escribió: > Faramir wrote: > >> If he is using ftp to upload the files... standard ftp sends username >> and password unencrypted... so it could be sniffed... > > So? The UID and PW to access the FTP Server is not [or shouldn't

Re: Starting with gnupg

2008-08-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: > If he is using ftp to upload the files... standard ftp sends username > and password unencrypted... so it could be sniffed... So? The UID and PW to access the FTP Server is not [or shouldn't be] the same as that used for the Sec

Re: Starting with gnupg

2008-08-02 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John W. Moore III escribió: > BTW, What would cause You to think that an Encrypted File 'falling into > the wrong hands' from a Web Storage Site would be any less secure than > one suffering the same fate from any other source? :-\ If he is usin

Re: Starting with gnupg

2008-08-02 Thread Robert J. Hansen
Faramir wrote: > If he is using ftp to upload the files... standard ftp sends username > and password unencrypted... so it could be sniffed... The canonical answer is "don't do that, then!" telnet and ftp are antique protocols that have much better replacements available to them. ssh, scp and sf

Re: Starting with gnupg

2008-08-02 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jean-David Beyer escribió: > You would certainly need the passphrase to get at the contents of > secring.gpg. But if I got the secret key from there, would I still need the > passphrase? I.e., does the passphrase control access to the _keyring_ or t

Re: Starting with gnupg

2008-08-02 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jean-David Beyer escribió: > Dwayne wrote: >> hands". Should I be worried that the person has the encrypted file or >> can I feel "safe" that the person doesn't have my privatekey+passphrase >> and therefore cannot decrypt it? > > He needs more tha

Re: Starting with gnupg

2008-08-02 Thread Robert J. Hansen
Jean-David Beyer wrote: > I.e., does the passphrase control access to the _keyring_ or the > _key itself_? The latter. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Starting with gnupg

2008-08-02 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John W. Moore III wrote: > Jean-David Beyer wrote: > > >> But if he somehow got your private key, I do not believe he >> would need your passphrase. > > YES! S/He _would_ need the passphrase even if in possession of the > Private/Secret Key. The p

Re: Starting with gnupg

2008-08-02 Thread Robert J. Hansen
Dwayne wrote: > What will happen, in case my backup-place gets compromised, and the > file comes into the "wrong hands". They get a bunch of data they cannot distinguish from white noise. :) > Should I be worried that the person has the encrypted file or can I > feel "safe" that the person doe

Re: Starting with gnupg

2008-08-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jean-David Beyer wrote: > But if he somehow got your private key, I do not believe he > would need your passphrase. YES! S/He _would_ need the passphrase even if in possession of the Private/Secret Key. The passphrase is the "key" that unlocks t

Re: Starting with gnupg

2008-08-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dwayne wrote: > Hey there Hey back! :-D > Lets say I've encrypted a file with my public-key, and uploaded it to > somewhere on the net for backup purposes. What will happen, in case my > backup-place gets compromised, and the file comes into the "

Re: Starting with gnupg

2008-08-02 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dwayne wrote: > Hey there > > I've just begun using gnupg, but I have a concern: > > Lets say I've encrypted a file with my public-key, and uploaded it to > somewhere on the net for backup purposes. What will happen, in case my > backup-place gets co

Starting with gnupg

2008-08-02 Thread Dwayne
Hey there I've just begun using gnupg, but I have a concern: Lets say I've encrypted a file with my public-key, and uploaded it to somewhere on the net for backup purposes. What will happen, in case my backup-place gets compromised, and the file comes into the "wrong hands". Should I be worried t