(OT) Re: gpg for pseudonymous users

2013-04-08 Thread Peter Lebbing
On 06/04/13 19:10, Ryan Sawhill wrote: > (individual maintainers building packages? seriously?) I think you misread a statement /I/ made. I said individual maintainers in Debian sign packages. They do not sign built binaries, but rather the source package. After that, an automated build system tak

Re: Create subkey that will expire in 10 hours

2013-04-08 Thread Kevin
At 1365102936 seconds of The Epoch, Werner Koch wrote: > Specifying the Epoch will anyway stop working in 2038 on many systems, > thus it is probably not good to allow its use. If a fixed data is > required, one may always specify something like "20130404T153012" for > both, the creation date and

Re: The Lord of the Keys

2013-04-08 Thread Kevin
At 1364755319 seconds of The Epoch, Ken Kundert wrote: > I am currently using gpg-agent to hold both my gpg and ssh keys. I use two > ssh > keys, which means that when I log in I have to give up to four passphrases to > unlock all of my keys. Given that gpg-agent is primarily a labor-saving > d

Re: The Lord of the Keys

2013-04-08 Thread Daniel Kahn Gillmor
On 04/08/2013 12:14 PM, Kevin wrote: > Forgive me if this answer seems too simplistic--perhaps I am missing > something--but would it be possible to make your SSH authentication keys > subkeys of the same master/signing key? Then, when you unlock the > master key, all the sub-keys should unlock w

Re: A PC user unfamiliar with any free software would like to send me messages that only we can read. Now what do I do?

2013-04-08 Thread Kevin
At 1365125582 seconds of The Epoch, Don Saklad wrote: > A PC user unfamiliar with any free software would like to send > messages that only the two of us can read. Now what do I do? The numbers > of steps for it appear to be insurmountable! And I've failed to > understand GNUPG myself. There isn't

Re: The Lord of the Keys

2013-04-08 Thread David Tomaschik
Hi Ken, Sorry for not replying sooner, I somehow lost track of this thread... Rather than type it all out, I'll just point you to this blog post that someone (Jeroen?) helpfully put together on the topic: http://budts.be/weblog/2012/08/ssh-authentication-with-your-pgp-key On Mon, Apr 1, 2013 a

Re: Vanity Key

2013-04-08 Thread Melvin Carvalho
On 2 April 2013 18:45, Daniel Kahn Gillmor wrote: > On 04/02/2013 05:40 AM, Melvin Carvalho wrote: > > In bitcoin you have the concept of a 'vanity key' much like vanity > license > > plates, see: > > > > https://bitcointalk.org/index.php?topic=25804.0 > > > > I wonder if there is anything simila

Re: Vanity Key@@sig

2013-04-08 Thread Melvin Carvalho
On 3 April 2013 19:39, Andreas Mattheiss wrote: > Well, uhm, if it's really important to you: > > The concept of hashes/fingerprints/etc. is that it is (next to) impossible > to find an entity-to-be-hashed (here a key) if you specify the hash. In > fact a hash function that allows you to do this w