Re: Why would I want S/MIME?

2016-09-13 Thread Werner Koch
On Mon, 12 Sep 2016 21:10, r...@sixdemonbag.org said: > I use S/MIME literally daily at work. My co-workers like S/MIME because it's > close to an "it just works" solution. Few of my co-workers have been willing > to learn GnuPG. You mean GPG. GnuPG includes GPG and GPGSM and thus support fo

Re: Javascript and smartcard

2016-09-13 Thread Werner Koch
On Tue, 13 Sep 2016 01:02, d...@fifthhorseman.net said: > how to talk to gpg-agent for use of secret keys. That way gpg-agent > could delegate the work to the smartcard via scdaemon, and OpenPGP.js > wouldn't need to know anything about the secret key material. It might be worth to look at Nativ

Re: Confusion about a statement in the FAQ

2016-09-13 Thread Andrew Gallagher
On 11/09/16 02:13, Robert J. Hansen wrote: >> Whichever "they" you had in mind when you brought it up...? ;-) > > I said "Enigmail and other clients" -- if you don't specify which > precise implementation you're interested in, I don't know which one you > want to know about. Well, I sort of wante

Re: Why would I want S/MIME?

2016-09-13 Thread Mark H. Wood
On Mon, Sep 12, 2016 at 03:10:24PM -0400, Robert J. Hansen wrote: > > I understand what S/MIME is and that it's probably the easiest crypto > > solution for most email users. But why would someone comfortable with > > GnuPG use it? > > There's a subtle point here. The question isn't whether you'r

Changing smartcard

2016-09-13 Thread Andrew Gallagher
I recently decided to change my default smartcard on one machine because it was easier to use and carry a flat card than one in a USB reader, and that particular machine has a smartcard slot. I had two smartcards anyway for testing purposes. I thought it would be a simple matter of deleting the ke

Unknown Protocol error message

2016-09-13 Thread Jerry
using claws-mail on a Windows 10 Pro / 64 bit machine, I see the following error message appear quite often on the bottom of the screen: The signature can't be checked - Unsupported protocol I don't understand the reason for this or how to correct it. Can anyone assist me? -- Jerry ___

Re: Why would I want S/MIME?

2016-09-13 Thread Ralph Seichter
On 12.09.2016 21:15, Anthony Papillion wrote: > Assuming everyone is willing and comfortable with using GnuPG, is there > any compelling reason (aside from easy setup and use) to use S/MIME? The main reason I can think of is the fact that there are mail clients that don't support PGP without sign

Re: Why would I want S/MIME?

2016-09-13 Thread Robert J. Hansen
> You mean GPG. GnuPG includes GPG and GPGSM and thus support for OpenPGP > and for S/MIME. No, they refuse to learn GnuPG. If S/MIME was provided by GPGSM they'd refuse to use S/MIME -- they want something that "just works," not something they have to install and fiddle with. _

DANE-OpenPGPkey lookup with GnuPG

2016-09-13 Thread Rene "Renne" Bartsch, B.Sc. Informatics
Hi, I'm new to the list, so a "Hello" to all! ;) I'm trying to look up public OpenPGP-keys published via DNSSEC (IETF RFC 7929) using the command 'gpg2 --auto-key-locate dane --search-keys i...@mail.de' on Ubuntu 16.04 (GnuPG version 2.1.11). gpg2 always returns: gpg: no keyserver known (use op

DANE-OpenPGPkey lookup with GnuPG

2016-09-13 Thread Rene "Renne" Bartsch, B.Sc. Informatics
Hi, I'm new to the list, so a "Hello" to all! ;) I'm trying to look up public OpenPGP-keys published via DNSSEC (IETF RFC 7929) using the command 'gpg2 --auto-key-locate dane --search-keys i...@mail.de' on Ubuntu 16.04 (GnuPG version 2.1.11). gpg2 always returns: gpg: no keyserver known (use op

Re: DANE-OpenPGPkey lookup with GnuPG

2016-09-13 Thread Damien Goutte-Gattat
Hi, On 09/12/2016 11:54 PM, Rene "Renne" Bartsch, B.Sc. Informatics wrote: I'm trying to look up public OpenPGP-keys published via DNSSEC (IETF RFC 7929) using the command 'gpg2 --auto-key-locate dane --search-keys i...@mail.de' What's wrong with my command or gpg2? I think the --search-keys

Re: Unknown Protocol error message

2016-09-13 Thread Werner Koch
On Tue, 13 Sep 2016 12:54, je...@seibercom.net said: > using claws-mail on a Windows 10 Pro / 64 bit machine, I see the > following error message appear quite often on the bottom of the screen: > > The signature can't be checked - Unsupported protocol Did you load all the OpenPGP and the S/MIME pl

Re: DANE-OpenPGPkey lookup with GnuPG

2016-09-13 Thread Werner Koch
On Mon, 12 Sep 2016 23:54, r...@bartschnet.de said: > I'm trying to look up public OpenPGP-keys published via DNSSEC (IETF RFC > 7929) using the command 'gpg2 --auto-key-locate dane --search-keys > i...@mail.de' on Ubuntu 16.04 (GnuPG version 2.1.11). The command --search-keys is keyserver specif

Re: Changing smartcard

2016-09-13 Thread Andrew Gallagher
On 13/09/16 15:33, Werner Koch wrote: > On Tue, 13 Sep 2016 14:02, andr...@andrewg.com said: > >> 1. Why was the A keystub not deleted and regenerated when I did gpg >> --delete-secret-keys; gpg --card-status, like the E and S ones >> apparently were? > > Did you get a pinentry prompt to confirm

Re: Changing smartcard

2016-09-13 Thread Werner Koch
On Tue, 13 Sep 2016 14:02, andr...@andrewg.com said: > 1. Why was the A keystub not deleted and regenerated when I did gpg > --delete-secret-keys; gpg --card-status, like the E and S ones > apparently were? Did you get a pinentry prompt to confirm the deletion of the secret key (actually two prom

Re: [Linux/OS X] Identiv SCR3500 A working with OpenPGP Smartcards 2.1?

2016-09-13 Thread Scott R. Santos
Dear Damien Thank you greatly for your quick response and helpful information. This is very good news. Setting up the reader for a normal user should be fairly straightforward using a udev rule, so thank you for the reminder. Cheers, Scott Sent via Mutt from my Ubuntu Server. Damien Goutte

Signing and symmetrically encrypting files

2016-09-13 Thread Arbiel Perlacremaz
Hi   I am a little confused with the many gpp's options and need advice.   I want to export files to public servers, keeping them with encryption confidential to any individual outside of a given set of people. These documents have to be accessible to groups of correspondants. I intend to defi

Re: Serve up ssh key *and* gpg key?

2016-09-13 Thread Damien Goutte-Gattat
Hi, On 09/13/2016 04:42 PM, Daniel Haskin wrote: My question is, can GPG serve up both? Yes. I don't think it's possible to turn the SSH key I was given into a GPG key You don't need to do that. Just load the key into the agent using the ssh-add tool, as you would do if you were using th

Serve up ssh key *and* gpg key?

2016-09-13 Thread Daniel Haskin
Long-time GPG user here, thanks so much for everyone's help and work on it. I really like the feature GPG 2.1 has, where it can serve up a subkey of a private key to SSH and act as an SSH agent. I use a particular subkey of my master key for SSH authentication and I really like it. But, at