Re: preventing gpg-agent from storing a symmetric encryption key

2015-01-05 Thread Doug Barton
FYI, what you want to do doesn't make sense. :) You should read the man page, and learn about inactivity timeouts for gpg-agent. Also, you can wipe the agent altogether quite easily. Your concern about people gaining access to the console is well founded, but there are better solutions alread

Re: preventing gpg-agent from storing a symmetric encryption key

2015-01-05 Thread Ken Kundert
Hi Doug. I am aware of the ability to set inactivity timeouts and to clear the entire agent. And I still believe I can use this feature. What I have noticed about myself is that I will walk away from my keyboard without locking the screen. I just forget to do it. I have been trying to cha

Key generation, subkeys and improved documentation

2015-01-05 Thread Sandeep Murthy
Hi I have a couple of questions about key generation, subkeys and the documentation on gnupg.org. (FYI I have GnuPG/MacGPG (v. 2.0.26) on my Mac.) 1. I just tried to generate an RSA keypair using `gpg` on the command line, and it asks me to choose a key length between 1024 and 8192. Here is th

Re: Key generation, subkeys and improved documentation

2015-01-05 Thread Philip Jackson
On 05/01/15 16:54, Sandeep Murthy wrote: > I thought the maximum was 4096? For example, GPGKeychain (the GUI keychain > utility from the GPGTools suite which installs the GnuPG/MacGPG) doesnt’t > allow > key sizes bigger than 4096. In any case, choosing 8192 fails with `gpg`: > > gpg: keysi

Re: Thoughts on Keybase

2015-01-05 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 5 January 2015 at 3:22:19 AM, in , Robert J. Hansen wrote: > In context, the person had just committed a murder (see > my remark about standing over a dead body holding a > smoking pistol). We only *suspect* that: we saw him holding

Untrusted certificate for https://wiki.gnupg.org/

2015-01-05 Thread Alexander Buchner
In https://www.gnupg.org/blog/index.html there is link to https://wiki.gnupg.org/ which is kind of broken, because the site's certificate is untrusted due to an incomplete certificate chain. Are you aware of that? signature.asc Description: OpenPGP digital signature

Re: Key generation, subkeys and improved documentation

2015-01-05 Thread Nex6|Bill
> On Jan 5, 2015, at 7:54 AM, Sandeep Murthy wrote: > > Hi > > I have a couple of questions about key generation, subkeys and the > documentation > on gnupg.org. > > (FYI I have GnuPG/MacGPG (v. 2.0.26) on my Mac.) > > 1. I just tried to generate an RSA keypair using `gpg` on the command lin

Re: Thoughts on Keybase

2015-01-05 Thread Robert J. Hansen
> We only *suspect* that: we saw him holding a smoking gun but did not > actually see him fire it. Yes, which is plenty sufficient to soothe my conscience about invasive measures. If there's a homicide, ought it go uninvestigated and the shooter undiscovered just because we're concerned we might

Re: Key generation, subkeys and improved documentation

2015-01-05 Thread Sandeep Murthy
I think 4096 is enough for me, I don’t want to key of length 8192. I was just suggesting that the key generation dialogue in gpg could be improved. Sandeep Murthy s.mur...@mykolab.com > On 5 Jan 2015, at 22:46, Nex6|Bill wrote: > >> >> On Jan 5, 2015, at 7:54 AM, Sandeep Murthy wrote: >> >>