Re: It's time for PGP to die.

2014-08-17 Thread Heinz Diehl
On 16.08.2014, Kristy Chambers wrote: > Sorry for that crap subject. I just want to leave this. [] The use of PGP/GPG depends entirely on the respective needs and and context. For me, it has been working perfectly in many years, and thus, what's described in this article is a good example fo

Re: It's time for PGP to die.

2014-08-17 Thread da...@gbenet.com
On 17/08/14 08:57, Heinz Diehl wrote: > On 16.08.2014, Kristy Chambers wrote: > >> Sorry for that crap subject. I just want to leave this. > [] > > The use of PGP/GPG depends entirely on the respective needs and > and context. For me, it has been working perfectly in many years, and > thus,

Mail header encryption (was Re: It's time for PGP to die.)

2014-08-17 Thread Peter Lebbing
On 17/08/14 03:05, Garreau, Alexandre wrote: > Well, afaik, there’s *no* MIME header which is required for delivery However, in practice, MTA's, and specific configurations of MTA's, might depend on headers in the mail: - Spam filtering setups. Enough said. - Microsoft Exchange[1] is not an RFC2

Re: It's time for PGP to die.

2014-08-17 Thread Werner Koch
On Sun, 17 Aug 2014 01:08, r...@sixdemonbag.org said: > this blogpost: OpenPGP can't protect your metadata, and that turns out > to often be higher-value content than your emails themselves are. > Further, exposed metadata is inherent to SMTP, which means this problem > is going to be absolutely d

Re: It's time for PGP to die.

2014-08-17 Thread Peter Lebbing
On 17/08/14 11:57, Werner Koch wrote: > Using this feature it is possible to keep the entire RFC-822 based mail > infrastructure while using a different transport mechanism. This can be > done mostly transparent for existing applications using a private or > corporate gateways. So basically what

Re: It's time for PGP to die.

2014-08-17 Thread Heinz Diehl
On 17.08.2014, da...@gbenet.com wrote: > Leaving aside the issue of how popular encryption of mail is - we are faced > with the fact > that 98 per cent of computer users are completely ignorant about software and > hardware. They > just go into PC World and buy what they like. Looking around w

Re: It's time for PGP to die.

2014-08-17 Thread Werner Koch
On Sun, 17 Aug 2014 12:17, pe...@digitalbrains.com said: > - MUA's still work with RFC-822 based mail, with a sort of "dummy" envelope > that > holds an encrypted MIME message/rfc822 inside with the real metadata. These > MUA's still talk IMAP and SMTP. Exactly. Pprobably some MUAs need some fix

Re: Mail header encryption

2014-08-17 Thread Werner Koch
On Sun, 17 Aug 2014 11:41, pe...@digitalbrains.com said: > - Microsoft Exchange[1] is not an RFC2822-based messaging system. When > interfacing through SMTP, POP3 or IMAP, messages are converted to and from > X.400. Fortunately they are on the way to replace that gradually by RFC-x82[12]. Moder

Re: Fwd: It's time for PGP to die.

2014-08-17 Thread Michael Anders
I share most of Greene's arguments agaist PGP to a limited extent, however, he seems strongly biased against it. There are two points, in which I strongly disagree with Greene: A) For me forward secrecy is not of utmost importance for asymmetric end to end mail encryption. Your private key is comp

Re: Fwd: It's time for PGP to die.

2014-08-17 Thread Johan Wevers
On 17-08-2014 17:08, Michael Anders wrote: > Your private key is compromized if your system > has been hacked(if you don't live in a police state where authorities > can force you to reveal it). Unfortunately most of us do. Including the US, UK and the Dutch are aklso pushing for such laws. > On

Re: It's time for PGP to die.

2014-08-17 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 17 August 2014 at 10:41:27 AM, in , da...@gbenet.com wrote: > I've been using gnupg for many many years. I have 199 > users in my key ring and 99.99 per cent are > "untrusted." A fact that I for one do not mind. You > don't trust m

Re: It's time for PGP to die.

2014-08-17 Thread Robert J. Hansen
> Leaving aside the issue of how popular encryption of mail is - we are > faced with the fact that 98 per cent of computer users are completely > ignorant about software and hardware. "Completely ignorant" is an overstatement. Few people today are completely ignorant about software and hardware.

Re: Fwd: It's time for PGP to die.

2014-08-17 Thread Robert J. Hansen
> Unfortunately most of us do. Including the US, UK and the Dutch are > aklso pushing for such laws. Speaking only for the U.S., this is not the case. The United States Constitution protects an individual's right not to testify against themselves. If the production of a passphrase would have any

Re: It's time for PGP to die.

2014-08-17 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 17 August 2014 at 10:14:51 PM, in , Robert J. Hansen wrote: > I was watching a janitor mop a floor... without leaving > footprints in anything. It struck me because I mopped > my kitchen floor recently and wound up with soapy water

Re: It's time for PGP to die.

2014-08-17 Thread Robert J. Hansen
> To mop a floor (or, indeed, to concrete a floor) you start at the > opposite end to the door you will leave through and you work towards > the door, keeping off the bit you have already done. Yes. And somehow, I keep on getting soapy water on my shoes.

Re: Fwd: It's time for PGP to die.

2014-08-17 Thread Johan Wevers
On 17-08-2014 22:42, Robert J. Hansen wrote: > The only time production of a passphrase is permitted is when > it lacks any testimonial value. And who determines wether it has any "testimonial value"? That sounds like a fine legal loophole to pressure someone into telling the passphrase. In thos