TOFU for GnuPG

2015-10-29 Thread Neal H. Walfield
Hi, Last week, I checked in the TOFU code for GnuPG. This code will be part of the next release. It would be great to get some additional testing before this happens! Background -- TOFU stands for Trust on First Use and is a concept that will be familiar to anyone who regularly uses s

unable to encrypt emails in evolution using gpg

2015-10-29 Thread edward torvalds
When I encrypt email and click Send I get this error and sending mail fails Because "gpg: CEF41E5C: skipped: unusable public key gpg: [stdin]: encryption failed: unusable public key ", you may need to select different mail options. Where CEF41E5C is my key. Please note: I have imported both priva

Re: Installing gpg2/commads?

2015-10-29 Thread Andre Heinecke
Hi, On Saturday 24 October 2015 00:48:47 Sebastian Rose-Indorf wrote: > are there some commands for installing the > gnupg-w32-2.1.x_.exe (like -silent or -no_registry)? Afaik only the standard NSIS command line options are supported. /S for silent install and /D to modify the destinatio

Re: TOFU for GnuPG

2015-10-29 Thread Daniel Baur
Hello, Am 29.10.2015 um 15:06 schrieb Neal H. Walfield: > First, some > statistics are displayed, namely, that we've verified 5 messages > signed by this key in the past last hour. isn’t it a little bit problematic that GPG now logs how often I received emails by someone else? Sincerely, DaB.

Re: TOFU for GnuPG

2015-10-29 Thread Peter Lebbing
On 29/10/15 17:23, Daniel Baur wrote: > isn’t it a little bit problematic that GPG now logs how often I received > emails by someone else? I would think that in most situations, that is not a problem. If you exclusively use webmail, there isn't such a record directly on your computer's disk, but y

Re: TOFU for GnuPG

2015-10-29 Thread Johannes Zarl-Zierl
Hi Neal, Thanks for the heads-up on this. TOFU seems like a really big feature for everyday use! Out of curiosity: Does the TOFU implementation for gpg already allow for key transition statements / is this planned for some point in the future? Cheers, Johannes

Re: TOFU for GnuPG

2015-10-29 Thread Neal H. Walfield
At Thu, 29 Oct 2015 18:48:43 +0100, Johannes Zarl-Zierl wrote: > Out of curiosity: Does the TOFU implementation for gpg already allow for key > transition statements / is this planned for some point in the future? Unfortunately, it doesn't. This is because there is currently no standard way to c

Re: TOFU for GnuPG

2015-10-29 Thread Neal H. Walfield
Hi Peter, At Thu, 29 Oct 2015 19:57:29 +0100, Peter Lebbing wrote: > > On 29/10/15 17:23, Daniel Baur wrote: > > isn’t it a little bit problematic that GPG now logs how often I received > > emails by someone else? > > I would think that in most situations, that is not a problem. If you > exclus

Smartcard hotplug gpg-agent refresh/reload

2015-10-29 Thread Marc Mercer
Hello folks, I am hoping that someone out there knows what needs to be done to enable the hotplug support of gpg-agent. Scenario: We run gpg-agent with ssh-support enabled, and use yubikeys/nitrokeys with pgp smartcards to provide rsa authentication to servers. On OSX, you can configure your gpg