Re: Privacy Implications Of Signing Keys

2005-06-17 Thread Alphax
nPGP standard for this to happen. Anyway, a signature on a key means nothing whatsoever unless you happen to trust the key that issued the signature, so unless you countersigned the key that signed yours, there is a high degree of deniability. - -- Alphax OpenPGP key: 0xF874C613 - http://tinyurl.c

Corrupt keys

2005-06-18 Thread Alphax
you a list of the keyids on request) permanantly corrupted? - -- Alphax OpenPGP key: 0xF874C613 - http://tinyurl.com/cc9up http://en.wikipedia.org/wiki/User:Alphax There are two kinds of people: those who say to God, 'Thy will be done,' and those to whom God says, 'All right, then, h

Re: Corrupt keys

2005-06-21 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alphax wrote: > Recently, I discovered the following message on GPG startup: > > gpg: signature packet without timestamp > More fun: gpg: buffer shorter than subpacket gpg: buffer shorter than subpacket gpg: signature packet witho

Re: Windows (WinPT etc.)

2005-07-11 Thread Alphax
oading!) > How are all these projects related to each other? > I also was confused about this. However, WinPT is extraordinarily slow for me to use - it caches the entire keyring when it loads/anything changes, and with 700 keys it becomes unusable (actually, I gave up when my keyring

Re: receiving key to file and more

2005-07-20 Thread Alphax
> gpg --keyring --primary-keyring combined with the import statement may (or may not) do want you want. - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://ti

Re: zlib inflate problem

2005-07-25 Thread Alphax
assphrase-fd 0 --decrypt >>InFile > > > Hmm. What version of zlib are you using? > Is this related to the zlib security flaw mentioned back around the 8th of July? Sounds like it might almost be a buffer overflow error... - -- Alphax | /"\ En

Re: Best/correct way to back up keys and configuration?

2005-07-28 Thread Alphax
ckups - just in case it gets corrupted, but I want to rebuild my keyring from some saved point. Make sure *before you do anything else* that you have a backup of your secret key *and a revocation certificate*, in case anything bad happens... - -- Alphax | /"\ Enc

Re: Protecting signing key

2005-08-02 Thread Alphax
have both a backup of it and a revocation certificate. As for the encrypted file systems... Windows supports whole disk encryption in various forms as well. - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |

Re: Proof of email ownership

2005-08-07 Thread Alphax
GPG work with a localhost-based proxy even? - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ -BEGIN PGP SIGNATURE- Version: Gn

[Fwd: Re: Proof of email ownership]

2005-08-08 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Forwarded since it seems useful - Original Message Subject: Re: Proof of email ownership Date: Mon, 08 Aug 2005 09:07:24 +0200 From: Werner Koch <[EMAIL PROTECTED]> To: Alphax <[EMAIL PROTECTED]> CC: gnupg-use

Re: Arguments for inline PGP

2005-08-09 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Thomas Kuehne wrote: > Points taken - Have you ever looked at an signed (using MIME) message in > OutlookExpress? RRR . > > > Thomas > Sorry, I've never used Lookout. - -- Alphax

Re: Arguments for inline PGP

2005-08-10 Thread Alphax
, the goof-ball *is* the recipient. At that point, *Draw circle on desk* *Bang head here* - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up

Re: Arguments for inline PGP

2005-08-10 Thread Alphax
;Using Enigmail with Thunderbird" and went "Ooh! I have Thunderbird! I have a potentially compatible system!" and then read and installed stuff and discovered how OpenPGP works. So yes, it does happen. You are speaking to the converted :) - -- Alphax | /&

Re: Forgot the key passowrd

2005-08-10 Thread Alphax
#x27;t get myself motivated to improve it. > The password hashing is supposed to make it *difficult* to crack passphrases, because of the computational cost! Don't find a fast way to break them and force us all to use 200 character passphrases! - -- Alphax | /&qu

Re: Forgot the key passowrd

2005-08-10 Thread Alphax
haracter passphrases! > > > Apart from the fact that this is (more or less) security by obscurity > even if my program would be a million times faster, 7 characters still > would take a day. > How long will 8 characters (standard unix password length) take to break at present?

Re: Access experimental subpackets of 'User Attribute Packet'

2005-08-12 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 David Srbecky wrote: > vCard Subpacket (type 102) > -- > Subpacket specific data: >magic identification number >data - content of the vCard file > *c

Re: GPG 1.4.2 errors

2005-08-15 Thread Alphax
sing: gpg --import-options repair-pks-subkey-bug --import-options import-clean-sigs --import-options import-clean-uids --recv-keys 0xE0BB4BCD on the command line re-added the signatures, but --edit-key clean removed them again. This definately seems like a bug.

Re: Help revoking a signature

2005-08-15 Thread Alphax
and line: gpg --edit-key (keyid) revsig - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ -BEGIN PGP SIGNATURE- Version: Gnu

Re: Newbie: Sharing GnuPG info betn Windows and Linux

2005-08-16 Thread Alphax
gt; Linux: > SeaMonkey Mail Client > KMail > Konqueror > I believe that there is also a plugin available for KMail. - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML e

Re: Lost Private Key

2005-09-02 Thread Alphax
d help! > > > nevermind... i found an old backed-up copy of my private key... sorry > for the fuss. > Generate a revocation certificate NOW and store it in a secure offline location, along with a backup of your key. - -- Alphax | /"\ Encrypted Email

Re: Multiple signatures on a single file

2005-09-02 Thread Alphax
cond individual could add > their signature after me. > Use detached signatures? Generate a key to sign the document with, and have that key signed by the supervisor? Just my 2c... - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign Op

Re: PGP global directory cruft in keyservers

2005-09-06 Thread Alphax
o set your import and export options to clean these signatures automatically. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ ___

Re: OpenPGP Card

2005-09-06 Thread Alphax
ul in the following scenario: > Is that even allowed?? -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ __

Re: OpenPGP Card

2005-09-06 Thread Alphax
Zeljko Vrba wrote: > Alphax wrote: > >> Zeljko Vrba wrote: >> >>> Joe Smith wrote: >>> >>> >>>> For example, your CA can revoke your key leaving you with one key that >>>> is invalid X.509, but valid OpenPGP? Yuck! >>>

Re: OpenPGP Card

2005-09-06 Thread Alphax
Janusz A. Urbanowicz wrote: > On Tue, Sep 06, 2005 at 11:48:45PM +0930, Alphax wrote: > >>>The application is free to do whatever it wants with these objects, >>>given sufficient authentication to the card (PIN). Technically, there is >>>nothing CA can do to prev

Re: PGP global directory cruft in keyservers

2005-09-07 Thread Alphax
res are leaking into the > keyserver net. > Probably some PGP users who are "automagically" synchronising their entire keyrings with multiple keyservers, leaking keys that their owners would rather not have on the keyservers in the process :( -- Alphax | /"

Re: OpenPGP Card

2005-09-07 Thread Alphax
u trust the Microsoft CryptoAPI? Well why don't you just run Windows, which Microsoft Says is Perfectly Secure, and use Microsoft's inbuilt X.509 instead of OpenPGP, since Microsoft Guarantees No Back Doors in the CryptoAPI? -- Alphax | /"\ Encrypted Email Prefe

Re: OpenPGP Card

2005-09-07 Thread Alphax
he standard size of the EEPROM on a smartcard suitable for OpenPGP? 2. What else could you fit on such a card? 3. Is it possible to have multiple things on a smartcard without them conflicting? Thanks, -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon C

Re: OpenPGP Card

2005-09-07 Thread Alphax
his is similar to the reason why Enigmail insists on GPG instead of being able to interface with PGP on Windows systems. In that case, it appears that GNU/Linux has the upper hand, because at least there are *some* GPL/LGPL libraries available for what you want. With Windows, it appears that ev

Re: OpenPGP Card

2005-09-07 Thread Alphax
Peter Gutmann wrote: > Alphax <[EMAIL PROTECTED]> writes: > >>Zeljko Vrba wrote: >> >>>Joe Smith wrote: >>> >>>>For example, your CA can revoke your key leaving you with one key that >>>>is invalid X.509, but valid OpenPGP? Yuck! &

Re: OpenPGP Card

2005-09-07 Thread Alphax
Alon Bar-Lev wrote: > Alphax wrote: >> The only place in the GPL where libraries are mentioned is in >> reference to the LGPL. Using the Microsoft CryptoAPI doesn't appear >> to be legal; AFAICT, this is similar to the reason why Enigmail >> insists on GPG instead

Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs)

2005-09-09 Thread Alphax
t would work). I have friends who currently don't want to use PGP because they fear that their keys will be uploaded to a keyserver, and then they will be spammed forever more. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign O

Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs)

2005-09-09 Thread Alphax
Johan Wevers wrote: > Alphax wrote: >>Removing duplicated signatures however would probably have little impact, >>assuming you are removing only the newest ones > > Don't you mean keeping the newst ones? > Er, yes. However as David Shaw pointed out further down th

Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs)

2005-09-09 Thread Alphax
ng it to stop? It seems like the obvious first step. > Well, I don't know *where* they are coming from, but I (and the kind soul who worked it out and told me) know think we know *how* it's being done. And unfortunately, it's very easy (too easy!) to do, especially for someo

Re: This IS about GD - a proposal on dealing with the problem

2005-09-10 Thread Alphax
their key, but has a trusted revoker set... there are other situations where someone other than the key's owner would want to upload the key, but I can't think of them at the moment. -- Alphax | /"\ Encrypted Email Preferre

Re: This IS about GD - a proposal on dealing with the problem

2005-09-11 Thread Alphax
ture of the uploading key... how much of an extra burden would this be? -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \

Re: This IS about GD - a proposal on dealing with the problem

2005-09-11 Thread Alphax
Zeljko Vrba wrote: > Alphax wrote: > >>However, the keyserver would then have to verify the signature of the >>uploading key... how much of an extra burden would this be? >> > > In what way "extra burden"? Computationally (CPU), programming > complexity

Re: This IS about GD - a proposal on dealing with the problem

2005-09-11 Thread Alphax
t; command listed - this may just > be an oversight in > the doc file, of course. > > I'll away and try exporting my keyring to see what happens. > You need to put gpg.conf in the same directory as you keyrings (eg. C:\Documents and Settings\Bob\Application Data\GnuPG under Wind

Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs)

2005-09-11 Thread Alphax
their keys with GD sigs out to SKS keyservers; secondly, someone doing a 2-way synchronisation of their entire keyring with both the GD and the SKS network. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |

Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs) / Feature Request

2005-09-11 Thread Alphax
cdr wrote: > MUS1876 wrote: >> Alphax wrote: >>> I have friends who currently don't want to use PGP because they >>> fear that their keys will be uploaded to a keyserver, and then >>> they will be spammed forever more. >> >> >> I totally

Re: Importing keys

2005-09-14 Thread Alphax
OpenPGP defiend formats: Binary and ASCII > armored. It will automagically detect the mode. See rfc2440 for the > OpenPGP key formats. > > Can GPG use ascii-armored keyrings? Or must keyrings be binary files? -- Alphax | /"\ Encrypted Email Preferre

Re: Two questions

2005-09-15 Thread Alphax
le right away because I've gotten the procedure wrong in the first place? ;) -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \

Re: Trouble decrypting AES256 symmetric encrypted file

2005-09-19 Thread Alphax
614,055,611 bytes. > > Can anyone please help! > > Using gpg version 1.4.2, official Windows version > I have a feeling Windows has problems with files this large, esp. on NTFS. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign

Re: Any way to get smaller key sizes?

2005-09-28 Thread Alphax
sing OpenPGP :) -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ ___ Gnupg-users mailing list

Re: Incompatibility between GnuPG 1.2 and 1.4?

2005-09-30 Thread Alphax
Christian Stork wrote: > As requested: > > So, what's algo 121 ? > According to http://www.ietf.org/rfc/rfc2440.txt, it doesn't exist. The message is probably corrupt. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Rib

Re: OpenPGP Card in SIM Size.

2005-10-04 Thread Alphax
which takes Cards in SIM size. I guess it should work ..?! > Of course, the problem with a card that small is that you could swallow it (or otherwise lose it) ;) I wonder if someone will start producing SIM-sized OpenPGP cards? How about as SD/XD cards? - -- Alphax

Re: Convert "Sign Only" Primary Key

2005-10-04 Thread Alphax
encryption. You can however generate RSA sign & encrypt keys. > Any other possibilitys to use this Key, so it is compatible with PGP? > I'll cc: this to PGP-Basics @ yahoogroups; see what the people over there can dig up. - -- Alphax | /"\ Encrypted Email

Re: Convert "Sign Only" Primary Key

2005-10-04 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Klaus Fuerstberger wrote: > Alphax said the following on 10/04/05 12:04: > > >>>>a time ago I created a "Sign Only" DSA Key with an ElGamal Encrypt >>>>Subkey. Now I noticed that it is not possible to en

Re: Armor headers

2005-10-08 Thread Alphax
gt; > Can I put custom text into "Version:" in stage of exporting public key, > making signatures, encrypting with ASCII output, etc.? > > Sometimes I do not wish that others will know what exactly OpenPGP > implementation and OS I'm currently using. > Well, yo

Re: Disk Partition

2005-10-10 Thread Alphax
s, and random file names. > For some of them you remember passwords, for most of them you don't (nobody > reasonable can expect you to remember 10s of thousands passwords). > Finally, something to do with all my Nigerian/pharmaceutical spam! :) - -- Alphax

Lack of backwards compatability?

2005-10-10 Thread Alphax
really breaks backwards compatability standards. Thanks, - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ -BEGIN PGP SIGNATURE

Re: How to fix the user ID on an old key?

2005-10-12 Thread Alphax
eem to change the key, only the way gpg handles it (when > exported it's still the same). Included below is the output from pgpdump, > in case that's of any help. > Re-import it from a keyserver, the copy on the SKS network has a valid self-sig... If that doesn't work, gpg

Re: security measures?

2005-10-15 Thread Alphax
ithin each missive to confirm authenticity. > Create a seperate signing and encryption subkeys and export them, disabling the secret part of the primary key when you do so. A good tutorial on this is available at http://fortytwo.ch/gpg/subkeys - -- Alphax | /"

Re: Modifying an uid, can it be done?

2005-10-18 Thread Alphax
at case I lose the "ultimate" tag to the left of the primary key. > What does this tag mean here? Which way to have this tag for the new > uids created? > UIDs *should* be self-signed upon creation. Trying signing your key with itself and updating the trust database. - -- Alpha

Re: Delete key from keyserver

2005-10-22 Thread Alphax
an alternative to GnuPG's > personal (face-to-face) methods. > Several people who I've tried to get using OpenPGP just "don't get it" because it's "too hard to integrate with (email client, usually Mail.app)" and have gone for Thawte X.509 certificates in

Re: GFDL (was: delete key from server)

2005-10-23 Thread Alphax
ources that his policy was derived from. Oh, one other thing: You need to make the source of the document (a "transparent copy" in legalese) available. Plain HTML is pretty OK for that. HTH, - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Ca

Signature packets without (whatever)

2005-10-25 Thread Alphax
gpg: buffer shorter than subpacket gpg: signature packet without keyid gpg: buffer shorter than subpacket Now, I figured that cleaning the keys would probably fix this, but the question is: how do I find the offending keys? Or should I just batch-clean the lot? - -- Alphax

Re: Signature packets without (whatever)

2005-10-25 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Tue, Oct 25, 2005 at 11:53:51PM +0930, Alphax wrote: > >>Recently, when checking my trustb I get the following appearing: >> >>gpg: buffer shorter than subpacket >>gpg: signature packet witho

Re: allowed commands on keys that keyservers handle correctly

2005-10-27 Thread Alphax
there any other drawbacks of Biglumber? > Biglumber *does* (AFAIK) allow multiple keys per email address. That's one of the reasons it's better than the GD. - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF8

Re: Lots of questions

2005-10-27 Thread Alphax
B > c) ZIP > d) Uncompressed > Correct? Since you "don't care" about Windows users, bzip2 is fine. GPG is pretty good though; I use Windows and don't have any problems with bzip2. > IV) How to create my new key the best way? > > Ok these day

Re: ECC

2005-10-27 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Topas wrote: > Hi. > > When are we going to have ECC support in GnuPG? > Is it in OpenPGP yet? - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613

Re: The never-ending GD discussion,part 74

2005-10-27 Thread Alphax
d it's way into server protocol implementations? > Are there any hidden problems at first sight? > It would disallow freeform UIDs. - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Ag

Re: Signature packets without (whatever)

2005-10-29 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Wed, Oct 26, 2005 at 12:08:55AM +0930, Alphax wrote: > >>David Shaw wrote: >> >>>On Tue, Oct 25, 2005 at 11:53:51PM +0930, Alphax wrote: >>> >>> >>>>Recent

Re: Feature request: expand 'clean' to 'clean total'

2005-10-30 Thread Alphax
al keyrings with > hundreds of keys? Because you don't have the corresponding signing > key in your local keyring, gpg cannot verify them, so these > signatures are not useful for you. (With the exception, that you have > a visual hint that there are more signatures on the keyserve

Re: Signature packets without (whatever)

2005-10-30 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Tue, Oct 25, 2005 at 11:53:51PM +0930, Alphax wrote: > >>Recently, when checking my trustb I get the following appearing: >> >>gpg: buffer shorter than subpacket >>gpg: signature packet witho

Re: Signature packets without (whatever)

2005-10-31 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alphax wrote: > David Shaw wrote: > >>>On Tue, Oct 25, 2005 at 11:53:51PM +0930, Alphax wrote: >>> >>> >>>>Recently, when checking my trustb I get the following appearing: >>>> >>

Batch setting ownertrust

2005-11-02 Thread Alphax
cs on ownertrust files in the source code? - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ -BEGIN PGP SIGNATURE- Version: GnuPG v

Re: Batch setting ownertrust

2005-11-03 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alphax wrote: > I know this is probably a bad idea, but I want to do it anyway... > > Is there anyway to set ownertrust on a key in batch mode? > > If there isn't, how can I generate an ownertrust file and import it? > >

Re: back signatures

2005-11-04 Thread Alphax
ut this, an attacker can "steal" a signing subkey from someone >>else and try and pretend that a signature came from his own key. It's >>not a particularly good attack: the attacker can't issue signatures to >>prove his ownership. > > > I should add that t

Re: back signatures

2005-11-04 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Sat, Nov 05, 2005 at 01:47:08PM +1030, Alphax wrote: > >>David Shaw wrote: >> >>>On Fri, Nov 04, 2005 at 02:24:09PM -0500, David Shaw wrote: >>> >>> >>>>On

Re: back signatures

2005-11-04 Thread Alphax
a signature came from his own key. It's > not a particularly good attack: the attacker can't issue signatures to > prove his ownership. > Will this remove the possibility of moving subkeys from one primary key to another / converting primary keys to subkeys (documented at http:

Re: how to handle "bad" signers?

2005-11-05 Thread Alphax
n-local signing, and many keys in the keyserver network have PGP GD sigs on them, again due to "automagic" refreshing (most likely through LDAP). I realise that this has turned into a bit of a screed, but it looks like the best policy is: Don't do stuff unless you know what you are do

Re: back signatures

2005-11-05 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Sat, Nov 05, 2005 at 04:32:07PM +1030, Alphax wrote: > >>David Shaw wrote: >> >>>On Sat, Nov 05, 2005 at 01:47:08PM +1030, Alphax wrote: >>> >>> >>>>David Shaw wrote

Re: how to handle "bad" signers?

2005-11-05 Thread Alphax
P > currently has no way to make a "negative" signature. > If it did, there would be a corresponding "Web of Antitrust". - -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Agai

Re: back signatures

2005-11-05 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Sun, Nov 06, 2005 at 12:04:27AM +1030, Alphax wrote: > > >>>It's as official as any release that hasn't happened yet: that is to >>>say, we're happy and thrilled if you test it ou

Re: back signatures

2005-11-07 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Sat, Nov 05, 2005 at 04:39:40PM +1030, Alphax wrote: > >>David Shaw wrote: >> >>>On Fri, Nov 04, 2005 at 10:15:16PM +0300, Pawel Shajdo wrote: >>> >>> >>>>Sa

Re: back signatures

2005-11-07 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: > On Mon, Nov 07, 2005 at 11:55:02PM +1030, Alphax wrote: > > >>>>>It's a countermeasure against an attack against signing subkeys. >>>>>Basically, the primary key signs all subkeys.

Re: Keytypes and changing them

2005-11-08 Thread Alphax
This does not affect third-party signatures. >> >> > Good,.. so I could change this as often as I'd like to, correct? > I wouldn't advise it. Add a subkey. If you don't want your primary key to be "accidentaly" used for si

Re: back signatures

2005-11-10 Thread Alphax
ey) used for? I thought this is used for primary >>selfsigs. > > > No, 0x13 (or 0x10, 0x11, 0x12) are used to sign a user ID and primary > key together. Historically, people call this "signing a key", but > it's really signing a user ID + key. > &

Re: Are gpg signatures considered attachments?

2005-12-28 Thread Alphax
list say? > > Mailman seems to be okay with such things... generally adding a mailing list footer won't mangle PGP/MIME (I've never seen it mangle inline PGP), but once you add attachments the list footer will start breaking things. -- Alphax | /"

Re: Selecting subkeys while using GnuPG

2006-01-08 Thread Alphax
the help though. > Erm... I know(?) GPG is meant to use a subkey "where possible" (ie. if a signing subkey exists it will use it, if an encryption subkeys exists it will use it), but is it meant to exhibit the same behaviour as PGP in that it will use the newest subkey if no

Re: Providing shell-completions for gpg, minor scripting issues

2006-01-16 Thread Alphax
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA Cipher: 3DES (S2), CAST5 (S3), BLOWFISH (S4), AES (S7), AES192 (S8), AES256 (S9), TWOFISH (S10) Hash: MD5 (H1), SHA1 (H2), RIPEMD160 (H3), SHA256 (H8), SHA384 (H9), SHA512 (H10) Compression: Uncompressed (Z0), ZIP (Z1), ZLIB (Z2) HTH, -- Alph

Re: Using other compression algos with GnuPG

2006-01-21 Thread Alphax
use whatever compression scheme you want and pipe it into > |gpg --compress-algo none. > One tool one job :). > Yes, this has the added "advantage" that your recipient has to be able to deal with whatever non-standard compression you choose. YMMV. -- Alphax

Re: There new XMPP (aka Jabber) room GnuPG-ru

2006-01-26 Thread Alphax
t and many >>>others. >> >>I suggest Gajim which is truly ellegant and available for Linux and >>Windows. > > > I not used gajim yet. I prefer tkabber and psi at the moment. > Tkabber can sign messages with gnupg. > PSI/Tkabber

Re: OpenPGP smartcard: addcardkey fails

2006-02-15 Thread Alphax
> Any clue? Thanks in advance. > Is the secret part of the primary key available in your local keyring? -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Ag

cURL keyserver handlers broken

2006-02-18 Thread Alphax
Under GPG 1.4.3rc1 I'm completely unable to get the cURL-type keyserver handlers to function correctly. For example, using the following command: gpg --no-options --keyserver sks.keyserver.penguin.de --search Alphax I get the error: ?: localhost: Unable to connect: ec=0 gpgkeys: HTTP s

Re: cURL keyserver handlers broken

2006-02-18 Thread Alphax
David Shaw wrote: > On Sun, Feb 19, 2006 at 04:09:32PM +1030, Alphax wrote: > >>Under GPG 1.4.3rc1 I'm completely unable to get the cURL-type keyserver >>handlers to function correctly. For example, using the following command: >> >>gpg --no-options --keyserve

Re: cURL keyserver handlers broken

2006-02-19 Thread Alphax
David Shaw wrote: > On Sun, Feb 19, 2006 at 04:42:19PM +1030, Alphax wrote: > >>David Shaw wrote: >> >>>On Sun, Feb 19, 2006 at 04:09:32PM +1030, Alphax wrote: >>> >>> >>>>Under GPG 1.4.3rc1 I'm completely unable to get the cURL-

Re: cURL keyserver handlers broken

2006-02-19 Thread Alphax
David Shaw wrote: > On Sun, Feb 19, 2006 at 11:24:40PM +1030, Alphax wrote: > > >>Host: sks.keyserver.penguin.de >>Command:SEARCH >>gpgkeys: HTTP URL is >>`http://sks.keyserver.penguin.de:11371/pks/lookup?op=index&options=mr >>&s

Re: cURL keyserver handlers broken

2006-02-19 Thread Alphax
David Shaw wrote: > On Mon, Feb 20, 2006 at 01:52:40AM +1030, Alphax wrote: > >>David Shaw wrote: >> >>>That looks correct so far. I don't suppose you have an environment >>>variable http_proxy set? >>> >> >>Yes, but I thought tha

Re: file encryption and integrity check

2006-02-21 Thread Alphax
s it; if so, it won't try to. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ signature.asc Descripti

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-22 Thread Alphax
t; probably a better use for LDAP capabilities than to store public keys... > > Perhaps something to add in the future? > (feature request ;-) > Isn't this what Kerberos was designed for? -- Alphax | /"\ Encrypted Email Preferred | \ / AS

Re: Global Deb/XP keys from Deb partition ?

2006-03-02 Thread Alphax
t; .. where it hung. > Running gpg with no arguments assumes that you're either going to type something to sign/encrypt (followed by ^D) or paste a signed/encrypted blob which it will verify/decrypt. You need: # gpg --armor --export mykey > mykey.asc HTH, -- Alphax

Re: decription directly from texteditor

2006-03-03 Thread Alphax
write a Lua extesion for it :) > i dont want to decrypt files first and than open them. i want to do > this in one step. > If you're on W32 you can try GPGShell which has an "edit clipboard" function available from the tray. Otherwise KGPG etc. -- Alphax

Re: Problem removing a public key whose private key is gone

2006-03-13 Thread Alphax
cert. Would you > elaborate on "beat"? > Sore out of luck. People will keep using the key which is on the key server, and you will be unable to do anything except reply "Sorry, I lost that secret key, can't decrypt, here is my new key".

Re: How to view non-default keyrings ?

2006-03-15 Thread Alphax
there. > > Use --keyring on the command line, or without the -- in your config file. A ~/ in will be expanded to $HOME, and if no path details are given it is assumed that the file is in $GNUPGHOME (usually ~/.gnupg/). -- Alphax | /"\ Encrypted Email Prefer

Re: Problem decrypting large file.

2006-03-21 Thread Alphax
.org/pipermail/gnupg-users/2006-February/028073.html and their replies. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ signature.a

Re: Error: "unusable public key"

2006-03-21 Thread Alphax
to your gpg exectution command, ie. $ gpg -a --homedir /path/to/.gnupg --trust-model always -r [EMAIL PROTECTED] --batch -o sql.asc -e sql.gz or add trust-model always to your .gnupg/gpg.conf file. HTH, -- Alphax | /"\ Encrypted Email Preferred | \ /

Re: [GPGOL] No keys found

2006-03-23 Thread Alphax
1.4.2.2 ASAP. -- Alphax | /"\ Encrypted Email Preferred | \ / ASCII Ribbon Campaign OpenPGP key ID: 0xF874C613 |X Against HTML email & vCards http://tinyurl.com/cc9up| / \ signature.asc Description: Open

Re: gpg-zip?

2006-04-05 Thread Alphax
ws version? > > Because it won't work with Windows. It requires a Bourne shell and > the tar tool - this is not available under Windows. > Unless you have Cygwin or MSYS. -- Alphax Message composed: 2006-04-05T19:54:29+09:30 ___

  1   2   >