Re: Web of Trust itself is the problem

2010-01-08 Thread Dmitri Minaev
On Thu, Jan 7, 2010 at 9:08 PM, Mario Castelán Castro wrote: > I think the WoT and in general the cryptography is not widely used > because few people really care about their privacity. IMHO, there's another problem, an entry barrier to the WoT. The practice of key exchange is widespread in very

Re: Web of Trust itself is the problem

2010-01-08 Thread Simon Josefsson
Dmitri Minaev writes: > On Thu, Jan 7, 2010 at 9:08 PM, Mario Castelán Castro > wrote: > >> I think the WoT and in general the cryptography is not widely used >> because few people really care about their privacity. > > IMHO, there's another problem, an entry barrier to the WoT. The > practice o

ElGamal key results revoked on keyserver but not locally

2010-01-08 Thread Paride Legovini
Hello gnupg-users, some time ago I messed up a keypair I use, see: http://pgpkeys.pca.dfn.de/pks/lookup?search=torn%40autistici.org&op=vindex There's a double selfsig on the main uid. I don't know/remember why, but this isn't the real problem. Then there's a secondary uid, revoked. Everything se

Re: ElGamal key results revoked on keyserver but not locally

2010-01-08 Thread Werner Koch
On Fri, 8 Jan 2010 12:56:33 +, Paride Legovini wrote: > Finally, there'a second ElGamal key (1024g/71D7872E), with two `sbind' > entries that I can't explain. This key seems revoked too, however, when > I import all this stuff to my local keyring, the 71D7872E key does not > result revoked (th

Re: Web of Trust itself is the problem

2010-01-08 Thread Dmitri Minaev
On Fri, Jan 8, 2010 at 8:21 PM, Mario Castelán Castro wrote: >>IMHO, there's another problem, an entry barrier to the WoT. The >>practice of key exchange is widespread in very close circles of >>geeks, Linux developers and, to a certain degree, scientists. For >>someone who does not belong to the

Re: Web of Trust itself is the problem

2010-01-08 Thread Mario Castelán Castro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Januery 8th 2010 in gnupg-users@gnupg.org thread "Web of Trust itself is the problem" >However, most people lack the skills necessary to do anything about >their privacy, and lack the inclination (time, energy, or even >self-confidence) to do anythi

very short plaintexts symmetrically encrypted

2010-01-08 Thread vedaal
have been playing around with symmetrical encryption, and noticed something potentially concerning. Here are 6 symmetrically encrypted short plaintexts: -BEGIN PGP MESSAGE- Version: GnuPG v1.4.9 (MingW32) Comment: passphrase sss jA0ECgMIml0qMoARY01g0kUBK8nPnLhmkn4QbxiOvxyn9eqhkzr5mNIw

Inhibit pgp-agent warning?

2010-01-08 Thread Pepijn Schmitz
Hi everyone, I have a backup script which uses gpg to encrypt the backup, and is executed every night by cron (both by root as by an admin user). This is gpg 1.4.6 on Ubuntu Hardy LTS. My problem is that gpg insists on printing a "gpg: gpg-agent is not available in this session" warning every tim

Re: Web of Trust itself is the problem

2010-01-08 Thread Robert Holtzman
On Fri, Jan 08, 2010 at 10:21:51AM -0600, Mario Castel�n Castro wrote: > > Did you count the citys in the list, they are just 11 of thoustands > and thoustands around the world; it helps of course, but very little. You obviously didn't try to use the search box to find more cities. -- Bob Holtz

Re: Web of Trust itself is the problem

2010-01-08 Thread Heinz Diehl
On 07.01.2010, Mario Castelán Castro wrote: > I think the WoT and in general the cryptography is not widely used > because few people really care about their privacity. I think the overall stats for people using cryptography is that low because it is or seems too complicated for them. A lot of pe

Re: 768-bit RSA factored

2010-01-08 Thread Christoph Anton Mitterer
So let's hope the ECC draft makes it soon to be finished :) ... and implemented in gpg ;) Cheers, Chris. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: very short plaintexts symmetrically encrypted

2010-01-08 Thread Benjamin Donnachie
2010/1/8 : > At any rate, it seems disturbingly easy to distinguish between > symmetrically encrypted messages having only the word 'yes' or 'no' > just by 'looking' at the ciphertext. i. Don't send such short messages ii. Don't use symmetric encryption. Ben

Re: GPG4Win for OpenPGP Card 2 ?

2010-01-08 Thread Olav Seyfarth
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi Stefan, > gpg: Prüfung der erstellten Unterschrift ist fehlgeschlagen: Bad signature > gpg: Beglaubigung fehlgeschlagen: Bad signature > gpg: make_keysig_packet failed: Bad signature > Schlüsselerzeugung fehlgeschlagen: Bad signature No, I do

Import of old keys

2010-01-08 Thread Bernhard
Hallo, For a long time I have used debian sid and gnupg with three keys for different purposes. After moving to Ubuntu (OT: for multimedia reasons) I fail to use these keys with the newly created account. I have access to all the old files and directories and would like to get some help for the i

Re: Import of old keys

2010-01-08 Thread Olav Seyfarth
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi Bernhard, > After moving to Ubuntu (OT: for multimedia reasons) I fail to use these > keys with the newly created account. I have access to all the old files > and directories and would like to get some help for the incorporation of > the old

Re: Web of Trust itself is the problem

2010-01-08 Thread RobertHoltzman
On Fri, Jan 08, 2010 at 07:46:28PM +0100, Heinz Diehl wrote: > > Personally I think a lot of people care about privacy, but are just not > able and/or frightened to install something complex on their machines. Then you get the contingent that sats "I have nothing to hide". -- Bob Holtzman GPG k