Re: gnupg-pkcs11 status & future

2016-02-28 Thread Werner Koch
On Fri, 26 Feb 2016 16:02, pe...@digitalbrains.com said: >> Rotating does only make sense if you take the old key soon offline. > > Why is this the case? I must admit I'm fairly comfortable not rotating > my keys (which are on OpenPGP smartcards). But I can think of lines of I personally agree in

Re: Are ZLIB and ZLIB2 no longer supported in GnuPG?

2016-02-28 Thread Werner Koch
On Fri, 26 Feb 2016 20:23, anth...@cajuntechie.org said: > options in my .conf file. Specifically, it told me that ZLIB and ZLIB2 > weren't supported as compression algos. You need to install a zlib development package before building GnuPG so that it can add support for this. You may also want

Re: gnupg-pkcs11 status & future

2016-02-28 Thread Werner Koch
On Sat, 27 Feb 2016 09:29, martin.kon...@erfrakon.com said: > Please allow me to mention that many smartcards disallow cleartext export of > keys generated on the card while also don't allow to import cleartext private > keys. Actually it is a core feature of all smartcards that you can't extra

Re: gnupg-pkcs11 status & future

2016-02-28 Thread Peter Lebbing
On 28/02/16 09:46, Werner Koch wrote: > The threat model would be based on the premise that keys can extracted > from a smartcard with some effort and an offline stored or deleted key > is more safe. Ah, that makes sense, thanks for the clarification! Peter. -- I use the GNU Privacy Guard (GnuP