Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Sun, 7 Aug 2005 07:17:13 -0700 (PDT), S K said: > How would this work out for people who do not have > control over the DNS record of domains? Best examples > are free email services like hotmail and gmail? Convince them to have a feature for upload a key or a key's fingerprint into the user s

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 08 Aug 2005 00:11:26 +0930, Alphax said: > Your other assumption is that everyone has continuous and unrestricted > (no proxies, firewalls) internet access. I can't even get GPG to work To clarify this: It is NOT a change of the trust modeel but an optional feature. Without access to th

Re: Feature request: Automatically import public keys

2005-08-08 Thread Werner Koch
On Sun, 07 Aug 2005 18:23:04 +0200, David Srbecky said: > Enigmail is great, but I find that public key import is very repetitive > and unnecessary action. Could Enigmail just try to import public keys > automatically for incoming mail? put keyserver-options aut-kye-retrieve into gpg.conf. S

Re: more than one message digest per signed message?

2005-08-08 Thread Werner Koch
On Sun, 07 Aug 2005 19:02:21 +0200, Thomas Kuehne said: > Is it possible to use more than one message digest when signing a > message with GnuPG? No. Shalom-Salam, Werner ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Sun, 07 Aug 2005 22:02:44 +0200, Jeroen Massar said: > - DNS is not a directory for random information It is not random information it just extends the domain system by local parts. Anyway, DNS is nowadays not anymore as for what it has been designed. > - Don't overload TXT records (though

[Fwd: Re: Proof of email ownership]

2005-08-08 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Forwarded since it seems useful - Original Message Subject: Re: Proof of email ownership Date: Mon, 08 Aug 2005 09:07:24 +0200 From: Werner Koch <[EMAIL PROTECTED]> To: Alphax <[EMAIL PROTECTED]> CC: gnupg-users@gnupg.org Re

Choosing a keyserver

2005-08-08 Thread Oskar L.
What differences are there between different keyservers? What should one take in consideration when choosing witch keyserver to use? Oskar ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Multiple self signatures

2005-08-08 Thread Tobias Eichert
Hello, I have multiple self signatures within my key and I haven't found a reason yet. I usually don't self-sign my key several times (well, at least I'm not aware of it). :) http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=vindex&fingerprint=on&search=0x7E9154BFDA817013 How can I prevent this? I

gpg-1.4.2 --key-gen error (in unattended mode)

2005-08-08 Thread Stephane Clodic
Hello, Using generation key in unattended mode, I have the following error even with the sample fil "foo" provided in DETAILS file (from the distribution) gpg: Generating a standard key +++..+.+

validate_key_list failed

2005-08-08 Thread Thomas Klausner
Hi! After adding some keys recently, I always get: gpg: public key 6E05F681 is 27717 seconds newer than the signature gpg: public key 8D1C8442 is 86014 seconds newer than the signature gpg: public key 8D1C8442 is 86010 seconds n

Save signature in mail headers

2005-08-08 Thread David Srbecky
Hello, I would like to sign all my mail, but I do not want to annoy people that have incompatible e-mail clients with extra attachment file or signature in the text of the message. Is it possible to send the signature in mail headers? Regards, David Srbecky _

secret key not available

2005-08-08 Thread William F Holmes
We recently generated a new key pair because of a server domain change. We generated a new armored public key and provided it to companies that send us files via ftp. They have encrypted files with our new public key and sent these files. We cannot decrypt them. Here is what we get when we

Re: Proof of email ownership

2005-08-08 Thread Bernd Jendrissek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 07, 2005 at 02:48:56PM +0200, Werner Koch wrote: > gpg detects that foo.gpg has the notation key [EMAIL PROTECTED] > and takes its value ([EMAIL PROTECTED]) to run a DNS query like: > > $ host -t txt werner._pka.example.org > werner._p

Re: validate_key_list failed

2005-08-08 Thread Peter Pentchev
On Fri, Aug 05, 2005 at 04:15:47PM +0200, Thomas Klausner wrote: > Hi! > > After adding some keys recently, I always get: [snip] > gpg: mpi larger than indicated length (2 bytes) > gpg: keyring_get_keyblock: read error: invalid packet > gpg: keyring_get_keyblock failed: invalid keyring > gpg: faile

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said: > Do these TXT records support having multiple keys associated with the > same email address? For example, I use D7CBA633 for "everyday" signing > and encryption, and 24EEB426 for tin foil hat applications. No. I can be extended to allow

Re: Proof of email ownership

2005-08-08 Thread Mads Laursen
On 07/08/05 14.48, Werner Koch wrote: > Hi! > > Let me note that I am currently working on a simplified key validation > scheme. The basic idea is to connect a signature to an DNS entry. Is this only for signatures, or will there also be a method to put this notation in a key, or would that be u

Re: Proof of email ownership

2005-08-08 Thread Simon Josefsson
Werner Koch <[EMAIL PROTECTED]> writes: > On Mon, 8 Aug 2005 09:37:10 +0200, Bernd Jendrissek said: > >> Do these TXT records support having multiple keys associated with the >> same email address? For example, I use D7CBA633 for "everyday" signing >> and encryption, and 24EEB426 for tin foil hat

Re: Proof of email ownership

2005-08-08 Thread Simon Josefsson
Werner Koch <[EMAIL PROTECTED]> writes: > To create a signature on an email (or any other data) you would use: > > gpg -s [EMAIL PROTECTED]@example.org foo I get this: [EMAIL PROTECTED]:~$ gpg -s [EMAIL PROTECTED]@extundo.com foo You need a passphrase to unlock the secret key for user: “Simon

Re: Proof of email ownership

2005-08-08 Thread Werner Koch
On Mon, 08 Aug 2005 14:24:50 +0200, Simon Josefsson said: > gpg: can't put notation data into v3 (PGP 2.x style) signatures > [EMAIL PROTECTED]:~$ > Is my key unusable with this scheme? For better compatibility with pre OpenPGP implementations, gpg creates v3 signatures with v3 keys (yours). v3

Automaticaly import public keys by e-mails

2005-08-08 Thread David Srbecky
Hello, I have a long list of emails. I want to look them up on a keyserver and automatically import any matches. I tried gpg --search-keys [EMAIL PROTECTED] < input.txt where input.txt is "1,2,3,4,5\n" but it did not work. Thanks for help. David smime.p7s Description: S/MIME Cryptograph

Re: Automaticaly import public keys by e-mails

2005-08-08 Thread Roscoe
Well, I don't know about a pure gnupg way but where theres a idea theres a broken piece of sh script trying to implement it! And without further ado I present my broken piece of sh script: $ cat > emaillist [EMAIL PROTECTED] [EMAIL PROTECTED] $ for i in `cat emaillist`; do lynx -dump "http://stin

Re: validate_key_list failed

2005-08-08 Thread Jason Harris
On Mon, Aug 08, 2005 at 12:33:07PM +0300, Peter Pentchev wrote: > On Fri, Aug 05, 2005 at 04:15:47PM +0200, Thomas Klausner wrote: > > After adding some keys recently, I always get: > > gpg: mpi larger than indicated length (2 bytes) > > gpg: keyring_get_keyblock: read error: invalid packet > > g

Extra information in public key

2005-08-08 Thread David Srbecky
Hello, I want to provide as much information about me as possible when I send mails. I am amazed that you can save a photo as a part of you public key. How can I save more information? (telephone, address, age, etc...) David signature.asc Description: OpenPGP digital signature _

Re: validate_key_list failed

2005-08-08 Thread Doug Barton
Peter Pentchev wrote: FWIW, I've been getting the same with the FreeBSD port of gnupg-1.4.2. I've reverted to using 1.4.1 for the present. I'm using 1.4.2 built from ports on both a 7-current and 4-stable system, with some pretty large keyrings, and haven't had these problems, FYI. Doug --

Re: Extra information in public key

2005-08-08 Thread Neil Williams
On Monday 08 August 2005 7:43 pm, David Srbecky wrote: > Hello, > > I want to provide as much information about me as possible when I send > mails. I am amazed that you can save a photo as a part of you public > key. How can I save more information? (telephone, address, age, etc...) Be careful abo

Re: Extra information in public key

2005-08-08 Thread Neil Williams
Please send replies to the list: > Neil Williams wrote: > > On Monday 08 August 2005 7:43 pm, David Srbecky wrote: > >>Hello, > >> > >>I want to provide as much information about me as possible when I send > >>mails. I am amazed that you can save a photo as a part of you public > >>key. How can I

Re: Extra information in public key

2005-08-08 Thread David Srbecky
Is there is way of publishing additional information on the keyserver? Only in small chunks. Please continue... how? "User Attribute" comes to mind, but I can not find the specification. Some things I would like to publish are: - The 'usual' stuff - aka ICQ servers or company vCards - W

Re: Extra information in public key

2005-08-08 Thread David Srbecky
Neil Williams wrote: On Monday 08 August 2005 7:43 pm, David Srbecky wrote: Hello, I want to provide as much information about me as possible when I send mails. I am amazed that you can save a photo as a part of you public key. How can I save more information? (telephone, address, age, etc...)

Re: Extra information in public key

2005-08-08 Thread David Srbecky
John W. Moore III wrote: David Srbecky wrote: And even if there was a giant site where I could enter all I wanted, I would still prefer to have everything saved on one place, in one public key. (But if there is such site, let me know !!! :-) ) How about a personal WebSite with a link to it in

Re: Automaticaly import public keys by e-mails

2005-08-08 Thread David Srbecky
Roscoe wrote: Well, I don't know about a pure gnupg way but where theres a idea theres a broken piece of sh script trying to implement it! And without further ado I present my broken piece of sh script: $ cat > emaillist [EMAIL PROTECTED] [EMAIL PROTECTED] $ for i in `cat emaillist`; do lynx -d

Re: Extra information in public key

2005-08-08 Thread David Srbecky
Hello, I just found up-to-date RFC 2440: http://www.ietf.org/internet-drafts/draft-ietf-openpgp-rfc2440bis-14.txt Here is 5.12: 5.12. User Attribute Packet (Tag 17) The User Attribute packet is a variation of the User ID packet. It is capable of storing more types of data than the Us

Arguments for inline PGP (was: Leave clearsigned content encoding alone, how?)

2005-08-08 Thread Greg Sabino Mullane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Just say no to inline PGP! Some reasons I use inline: * My email has a much better chance of reaching people whose systems bounce (or discard!) attachments. * It is easy to transfer my message to another format (such as a webpage) while keeping