Re: gpgsm: (pinentry:24664): GLib-GObject-CRITICAL **: Object class GtkSecureEntry doesn't implement property 'editing-canceled' from interface 'GtkCellEditable'

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 07:03, d...@fifthhorseman.net said: > gpgsm: (pinentry:24664): GLib-GObject-CRITICAL **: Object class > GtkSecureEntry doesn't implement property 'editing-canceled' from interface > 'GtkCellEditable' This warning is due to a newer version of Gtk+ (2.20). Pinentry uses a rep

Re: Testing GPG EMail encryption

2012-05-23 Thread Steve
> I don't know how much the demand is (or could be) but perhaps it would help > make more people use OpenPGP to have a round-robin email contact system. > Whoever is willing to help new users (like in this case) registers his email > address with the languages he's capable of communicating in. A

Re: Testing GPG EMail encryption

2012-05-23 Thread Werner Koch
On Tue, 22 May 2012 21:28, steveb...@gulli.com said: > If any of the GnuPG wizards like to chime in on the technical side on the bug > tracker we're happy about any input. AFAIK a Mac specific PINentry is used and not the GTK+ or QT version. Thus I can't help. Salam-Shalom, Werner -- Die

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/05/12 19:40, Robert J. Hansen wrote: > On 5/22/12 2:26 PM, Hauke Laging wrote: >> Given the frequency of this discussion and the amount of effort takes by the >> participants: Wouldn't it make sense to make this a FAQ entry? > > I think so, yes

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/05/12 19:46, Kevin Kammer wrote: > On Tue, May 22, 2012 at 08:26:14PM +0200 Also sprach Hauke Laging: >> Given the frequency of this discussion and the amount of effort takes by the >> participants: Wouldn't it make sense to make this a FAQ entr

Re: Testing GPG EMail encryption

2012-05-23 Thread Branko Majic
As a curiosity, any ideas on what you would do to avoid use of this system for spam purposes? (although encrypted spam won't be of much use :) Steve wrote: >> I don't know how much the demand is (or could be) but perhaps it >would help >> make more people use OpenPGP to have a round-robin emai

Re: Testing GPG EMail encryption

2012-05-23 Thread Mika Suomalainen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On 22.05.2012 21:06, Robin Kipp wrote: > Hello all, well, as of today, I finally decided to start signing my > EMail messages using GPG to prove the integrety of my messages. As > I am primarily using Mac OS, I downloaded MacGPG > (http://gpgtools

Re: Testing GPG EMail encryption

2012-05-23 Thread Peter Lebbing
On 23/05/12 11:19, Branko Majic wrote: > As a curiosity, any ideas on what you would do to avoid use of this system > for spam purposes? (although encrypted spam won't be of much use :) A simple challenge-response system should suffice, I'd say. When a new user mails to such an address, he receive

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Steve
I think we had the PGP/MIME vs inline discussion already. @Robert: Would that qualify for a second entry in your FAQ with the pro/cons listed? I really would love to see some distilled output. The discussions on this list are very valuable and having the pro / con arguments in some sort of wik

Re: gpgsm: (pinentry:24664): GLib-GObject-CRITICAL **: Object class GtkSecureEntry doesn't implement property 'editing-canceled' from interface 'GtkCellEditable'

2012-05-23 Thread Daiki Ueno
Werner Koch writes: >> gpgsm: (pinentry:24664): GLib-GObject-CRITICAL **: Object class >> GtkSecureEntry doesn't implement property 'editing-canceled' from >> interface 'GtkCellEditable' > > This warning is due to a newer version of Gtk+ (2.20). Pinentry uses a > replacement of GTK+'s standard t

There may be more to security than password length, or even its complexity.

2012-05-23 Thread Jean-David Beyer
http://2.bp.blogspot.com/-v15Nbl_zG7s/T6BFiQoGDEI/AHs/U5eU7O6MG3o/s1600/security-fail.jpg -- .~. Jean-David Beyer Registered Linux User 85642. /V\ PGP-Key: 9A2FC99A Registered Machine 241939. /( )\ Shrewsbury, New Jerseyhttp://counter.li.org ^^-^^ 07:40:01 u

Re: Testing GPG EMail encryption

2012-05-23 Thread Robert J. Hansen
On 5/23/12 2:50 AM, Steve wrote: > I absolutely agree. At GPGTools we thought about an automatic testing > system. Checking if the mail was encrypted and / or signed and then > sending out the according reply. You may want to move this discussion over to the Enigmail list. We have a system set up

Re: There may be more to security than password length, or even its complexity.

2012-05-23 Thread Hubert Kario
On Wednesday 23 of May 2012 07:41:56 Jean-David Beyer wrote: > http://2.bp.blogspot.com/-v15Nbl_zG7s/T6BFiQoGDEI/AHs/U5eU7O6MG3o/s1 > 600/security-fail.jpg How putting passwords to public WiFi on a wall undermines security? If you depend on PSK WiFi for security then you've already failed

Re: gpgsm: (pinentry:24664): GLib-GObject-CRITICAL **: Object class GtkSecureEntry doesn't implement property 'editing-canceled' from interface 'GtkCellEditable'

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 11:27, u...@unixuser.org said: > And it seems you already fixed it in the git repo some time ago: Well, close to a year ;-). > Is there any chance of new release? :-) I will do one tomorrow. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundes

Re: Testing GPG EMail encryption

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 11:30, mika.henrik.mai...@hotmail.com said: > I cannot verify your signature, because you use PGP/MIME and this > mailing list uses mailing list software which somehow messes up with > headers and makes PGP/MIME signatures unverifiable. It is this old Mailman/Python illness.

Re: Testing GPG EMail encryption

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 15:24, r...@sixdemonbag.org said: > You may want to move this discussion over to the Enigmail list. We have > a system set up that does much of this already, called Adele. We'd be Is that a different one than the Adele from Gnu_PP_, which is a closed source web service? Sa

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Mika Suomalainen
On 23.05.2012 12:56, Steve wrote: > I think we had the PGP/MIME vs inline discussion already. I am using PGP/MIME in this email. Can you verify my signature on this email? You can find link to my public key in my signature. Now I stop answering to these PGP/MIME vs INLINE. I think that I have sa

Re: Testing GPG EMail encryption

2012-05-23 Thread Mika Suomalainen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23.05.2012 16:24, Robert J. Hansen wrote: > On 5/23/12 2:50 AM, Steve wrote: >> I absolutely agree. At GPGTools we thought about an automatic >> testing system. Checking if the mail was encrypted and / or >> signed and then sending out the according

Fwd: The UK's cruelest cut

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Original Message Subject: The UK's cruelest cut Date: Wed, 23 May 2012 07:51:49 -0400 From: Emma Ruby-Sachs - Avaaz.org To: da...@gbenet.com Dear friends across the UK, Each year, tens of thousands of girls in the UK are force

Re: Testing GPG EMail encryption

2012-05-23 Thread Robert J. Hansen
On 5/23/12 11:29 AM, Werner Koch wrote: > Is that a different one than the Adele from Gnu_PP_, which is a closed > source web service? I don't know. We have the source and permission to use it -- my impression is that it's Free Software, but it's been years since I've taken a look at our Adele co

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 17:35, mika.henrik.mai...@hotmail.com said: > On 23.05.2012 12:56, Steve wrote: >> I think we had the PGP/MIME vs inline discussion already. > > I am using PGP/MIME in this email. Can you verify my signature on this > email? You can find link to my public key in my signature.

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Mika Suomalainen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23.05.2012 18:54, Werner Koch wrote: Weird. All PGP/MIME signed emails here cannot be verified if they are from mailing lists. PS. I am on this list so you don't need to CC me unless your email client forces it. - -- [Mika Suomalainen](https://

Re: Testing GPG EMail encryption

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 16:38, Mika Suomalainen wrote: > On 23.05.2012 16:24, Robert J. Hansen wrote: >> On 5/23/12 2:50 AM, Steve wrote: >>> I absolutely agree. At GPGTools we thought about an automatic >>> testing system. Checking if the mail was encrypted and /

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Mika Suomalainen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23.05.2012 18:54, Werner Koch wrote: > On Wed, 23 May 2012 17:35, mika.henrik.mai...@hotmail.com said: >> On 23.05.2012 12:56, Steve wrote: >>> I think we had the PGP/MIME vs inline discussion already. >> >> I am using PGP/MIME in this email. Can y

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 16:54, Werner Koch wrote: > On Wed, 23 May 2012 17:35, mika.henrik.mai...@hotmail.com said: >> On 23.05.2012 12:56, Steve wrote: >>> I think we had the PGP/MIME vs inline discussion already. >> >> I am using PGP/MIME in this email. Can you

Draft of nine new FAQ questions

2012-05-23 Thread Robert J. Hansen
I have a draft version of nine frequently asked questions ready for community review: http://keyservers.org/gnupgfaq.xhtml Note that this draft is in nicely-typeset XHTML5. This is to make it easier to proofread. The final version that I'm going to submit to Werner will be in plain text

Re: Testing GPG EMail encryption

2012-05-23 Thread Robert J. Hansen
On 5/23/12 11:38 AM, Mika Suomalainen wrote: > Why to move it to Enigmail list? According to American legend, a journalist once asked the infamous bank robber John Dillinger why he robbed banks for a living. "Because that's where the money is," he said. Why should a discussion about Adele move o

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Werner Koch
On Wed, 23 May 2012 17:59, mika.henrik.mai...@hotmail.com said: > PS. I am on this list so you don't need to CC me unless your email > client forces it. Set your MFT header correctly, if you want to avoid a CC. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesge

Re: Draft of nine new FAQ questions

2012-05-23 Thread michael crane
On Wed, May 23, 2012 5:18 pm, Robert J. Hansen wrote: > I have a draft version of nine frequently asked questions ready for > community review: > > http://keyservers.org/gnupgfaq.xhtml for me the first should always be "what is gnupg ?" regards mick -- keyID: 0x4BFEBB31 _

Re: Testing GPG EMail encryption

2012-05-23 Thread Steve
Hey David et all, first: GPGTools Installer does indeed contain Enigmail and allows installation. Not sure if it has the latest version since Mozilla's crazy versioning means lots of maintenance and we couldn't find a way to automate including new Enigmail versions. Also not sure if it is smart

Re: Testing GPG EMail encryption

2012-05-23 Thread Brad Rogers
On Wed, 23 May 2012 12:30:54 +0300 Mika Suomalainen wrote: Hello Mika, > I cannot verify your signature, because you use PGP/MIME and this > mailing list uses mailing list software which somehow messes up with > headers and makes PGP/MIME signatures unverifiable. Robin's sig verifies okay here.

Re: Testing GPG EMail encryption AKA PGP/MIME

2012-05-23 Thread Charly Avital
Mika Suomalainen <4fbd03cb.1070...@hotmail.com> May 23, 2012 12:38:40 PM wrote: > I am using PGP/MIME in this email. Can you verify my signature on this > email? You can find link to my public key in my signature. Good signature from Mika Suomalainen Key ID: 0x82A46728 / Signed on: 5/23/12 11:35

Re: Draft of nine new FAQ questions

2012-05-23 Thread Kevin Kammer
On Wed, May 23, 2012 at 05:34:16PM +0100 Also sprach michael crane: > > for me the first should always be "what is gnupg ?" > I believe these nine "new" FAQ entries are to be added to the existing entries to provide additional information regarding keysizes specifically. They are not comprehens

Re: Draft of nine new FAQ questions

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 17:34, michael crane wrote: > > On Wed, May 23, 2012 5:18 pm, Robert J. Hansen wrote: >> I have a draft version of nine frequently asked questions ready for >> community review: >> >> http://keyservers.org/gnupgfaq.xhtml > > for me t

Re: Testing GPG EMail encryption

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 18:39, Steve wrote: > Hey David et all, > > first: GPGTools Installer does indeed contain Enigmail and allows > installation. Not sure if it has the latest version since Mozilla's crazy > versioning means lots of maintenance and we could

Re: Testing GPG EMail encryption

2012-05-23 Thread Robert J. Hansen
On 5/23/12 3:07 PM, da...@gbenet.com wrote: > Now I have 3 Linux Laptops. I started testing Linux distros with gpg2 > - enigmail with Thunderbird - all 100 per cent Openpgp failed to > initialise with pgp2 and in fact Openpgp always signed to my private > key not my public key when using percipien

Re: Draft of nine new FAQ questions

2012-05-23 Thread David Shaw
On May 23, 2012, at 12:18 PM, Robert J. Hansen wrote: > I have a draft version of nine frequently asked questions ready for > community review: > > http://keyservers.org/gnupgfaq.xhtml > > Note that this draft is in nicely-typeset XHTML5. This is to make it > easier to proofread. The fin

Re: There may be more to security than password length, or even its complexity.

2012-05-23 Thread Mustrum
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Http://xkcd.com/538 :-) -BEGIN PGP SIGNATURE- Version: APG v1.0.8 iQI7BAEBCgAlBQJPvPDuHhxNdXN0cnVtIDxNdXN0cnVtQE11c3RydW0ubmV0PgAK CRBMuv2GX9WDnv71EADJYr8hgWu/5yGnKgrYHhE/w+uxieCAAtIlZDvXxHKKVFGC MC1xVgeYeksvM8fNL4RPMCs5ttsi1uA0OUax6jGxUg7W

Re: Testing GPG EMail encryption

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 20:28, Robert J. Hansen wrote: > On 5/23/12 3:07 PM, da...@gbenet.com wrote: >> Now I have 3 Linux Laptops. I started testing Linux distros with gpg2 >> - enigmail with Thunderbird - all 100 per cent Openpgp failed to >> initialise with pgp

Re: Draft of nine new FAQ questions

2012-05-23 Thread Robert J. Hansen
On 5/23/12 4:12 PM, David Shaw wrote: > #1 explains why we default to 2048-bit keys, but not why RSA. Fixed, thank you. > The answer you have for #4 is not exactly wrong, but it is not > complete. GnuPG doesn't support 4096-bit keys just because PGP (the > product) does. It also supports a rang

Re: There may be more to security than password length, or even its complexity.

2012-05-23 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/05/12 15:15, Mustrum wrote: > Http://xkcd.com/538 > > :-) > > > ___ > Gnupg-users mailing list > Gnupg-users@gnupg.org > http://lists.gnupg.org/mailman/listinfo/gnupg-users > Well is a wrench better

Re: Draft of nine new FAQ questions

2012-05-23 Thread David Shaw
On May 23, 2012, at 4:45 PM, Robert J. Hansen wrote: > I don't want to seem argumentative (especially because I haven't looked > at the RFC lately), but I was under the impression the RFC was mostly > silent on the subject of algorithms and key sizes -- DSA being a MUST > algorithm, but little gui

Re: Draft of nine new FAQ questions

2012-05-23 Thread Hauke Laging
Am Mi 23.05.2012, 12:18:49 schrieb Robert J. Hansen: > I have a draft version of nine frequently asked questions ready for > community review: > > http://keyservers.org/gnupgfaq.xhtml The reason I suggested a FAQ addition is not covered :-) At least not by the headlines. There should be a

Re: Draft of nine new FAQ questions

2012-05-23 Thread reynt0
On Wed, 23 May 2012, Robert J. Hansen wrote: . . . I have a draft version of nine frequently asked questions ready for community review: http://keyservers.org/gnupgfaq.xhtml Any and all feedback (save for visual design, layout, etc.) will be gratefully accepted. Thank you! Here FWIW

Re: Draft of nine new FAQ questions

2012-05-23 Thread Robert J. Hansen
On 5/23/12 6:50 PM, reynt0 wrote: > Also, just to mention, best to avoid smart apostrophes/quotes > in the final version, naturally, right? Not a whelk’s chance in a supernova. Those aren’t smart quotes, they’re perfectly valid UTF-8 typographic marks. "Straight quotes" and 'straight apostrophe

Re: There may be more to security than password length, or even its complexity.

2012-05-23 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mustrum wrote: > Http://xkcd.com/538 > > :-) I like that. It may be my passphrase is too long. I want it easier for the black hats to crack my stuff than for them to torture my passphrase out of me. I recently tested a (retired) password to my compu