New "Everyman's software" from CeBIT in Germany

Dear all, I'd be interested in hearing Werner Koch's take on this recent innovation. Werner, you speak German: A new "Everyman's software" featuring certification, key servers, currently Windows only (Linux planned), https://www.sit.fraunhofer.de/de/volksverschluesselung/ Said to be Open Source

Re: SKS Keyserver, HKPS and GnuPG 2.1

On Wed, 18 Mar 2015 22:52, david.j.woo...@gmail.com said: > I debugged this issue a few days ago. I've posted a patch for testing and > hopefully incorporation into a future GnuPG 2.1 build at It is on my shortlist. Thanks, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgeset

Re: USB key form-factor smart-card readers with pinpads?

On 13/01/2014, Peter Lebbing wrote: > On 12/01/14 00:18, Sam Kuper wrote: >> Again, perhaps I am wrong. But if I am not, then the use of OpenPGP >> cards with non-pinpad readers still makes no sense (at least, not to >> me). > > Since most readers don't filter VERIFY commands Yes, I'm getting to

Re: Article in Forbes.

Sounds like you should report it directly to GPGTools.org. I'm sure they have a bug tracker or mailing address somewhere. Have you seen any technical details on this attack? Its hard to tell exactly what's happening from that article. .hc Eric F: > Perhaps not directly gnupg related, more OS

--verify --status-fd separator for multiple signatures?

Hi, when using --verify combined with --status-fd [or --status-file], how can one notice in scripts, that processing the one signature is done and that further status-fd messages belong to the next message? I mean, sometimes it shows SIG_ID, but not in case of ERRSIG. So is there some line / sep

Re: --verify --status-fd separator for multiple signatures?

On Thu, 19 Mar 2015 18:39, patrick-mailingli...@whonix.org said: > when using --verify combined with --status-fd [or --status-file], how > can one notice in scripts, that processing the one signature is done and > that further status-fd messages belong to the next message? That is unfortunately a

Re: --verify --status-fd separator for multiple signatures?

On 3/19/15 10:39 AM, Patrick Schleizer wrote: Hi, when using --verify combined with --status-fd [or --status-file], how can one notice in scripts, that processing the one signature is done and that further status-fd messages belong to the next message? You are using --with-colons, right? --

Re: New "Everyman's software" from CeBIT in Germany

On Thursday 19 March 2015 09:18:03 Thomas F. Ruddy wrote: > Dear all, > > I'd be interested in hearing Werner Koch's take on this recent > innovation. Werner, you speak German: > > A new "Everyman's software" featuring certification, key servers, > currently Windows only (Linux planned), > > htt

Re: Making the case for smart cards for the average user

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 18 March 2015 at 1:35:46 AM, in , Brian Minton wrote: > I thought keyservers strip all punctuation. So > becomes foo example com. Keyservers seem to do that. GnuPG locating keys on the local keyring does not. A user with GnuPG co

Re: New "Everyman's software" from CeBIT in Germany

On 19/03/15 22:32, Ingo Klöcker wrote: > On Thursday 19 March 2015 09:18:03 Thomas F. Ruddy wrote: >> Dear all, >> >> I'd be interested in hearing Werner Koch's take on this recent >> innovation. Werner, you speak German: >> >> A new "Everyman's software" featuring certification, key servers, >> cu

Re: Email-only UIDs and verification (was: Making the case for smart cards for the average user)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 18 March 2015 at 6:18:57 PM, in , Jose Castillo wrote: > On Mar 16, 2015, at 8:55 PM, MFPA > <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: MFPA>> No angle brackets around the email address means no key found. JC> Good point, I’l