Re: Attacks on encrypted communicxatiopn rising in Europe

2016-08-24 Thread martin
y vocal about [1][2]. I think the answer here is to find a balance of some sort - i.e. keep vulnerabilities in rare cases for short periods of time and then disclose and patch them. However for that to work we need to trust the govt. to do the right thing. Which I think is pretty much the core issue t

gpg 1.4.16 Windows - version info

2014-02-19 Thread Martin
Hi Just installed GnuPG 1.4.16 for Windows (on XP over here). gpg --version gpg (GnuPG) 1.4.16 Now I see in the signed messages that the version information about GnuPG is very short: Version: GnuPG v1 Bug or feature? -- Beste Grüsse, Martin mailto:msch

How to back up my key

2013-07-15 Thread Martin
eCrypt container with a very strong password. Even if someone cracked that container, he would find my encrypted private key, with an even stronger password. If he would be able to bruteforce even that password, I think then I am dealing with an enemy with godlike powers anyways. Any input is greatly

Re: How to back up my key

2013-07-15 Thread Martin
ner (which I am already doing when I use Dropbox). I have read blog posts where people say that they even put their private master key openly into the wild because it has a strong passphrase and strong encryption anyways. Cheers, Martin On Mon, Jul 15, 2013 at 5:20 PM, Einar Ryeng wrote: >

Several master keys vs. master key and subkeys

2013-07-15 Thread Martin
if needed? Any reasons why I should stick to GPGs "native" subkey feature? Many thanks for your help in advance! Best regards, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Multiple email addresses - any alternative to ask everyone to sign all my keys?

2013-07-23 Thread Martin
@Chris: That still leaves the problem of having to enter the passphrase for the key on the untrusted machine, which might have a keylogger, doesn't it? On Wed, Jul 24, 2013 at 6:24 AM, Christopher J. Walters wrote: > On 7/23/2013 3:55 PM, Philipp Klaus Krause wrote: > >> Am 23.07.2013 21:04,

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Martin
Wow that landing page looks like a super cheap rip-off of http://heml.is/... On Sat, Jul 27, 2013 at 4:25 PM, Robert J. Hansen wrote: > On 7/26/2013 10:45 PM, Randolph D. wrote: > > Does anyone know, if this tool is really secure? > > Based only on their press release, this seems like a complete

Re: Unable to sign or decrypt with card

2017-09-15 Thread martin
ore. I would suggest (if you haven't tried that already). To try a different machine and/or a different reader combos and see if the problem is not a trivial faulty reader. Regards, Martin -BEGIN PGP SIGNATURE- iQIzBAEBCgAdF

Re: gpg-agent 2.1 persistent socket between sessions

2017-10-25 Thread martin
esses lingering but can potentially cause other problems. Martin [1] - https://www.freedesktop.org/software/systemd/man/logind.conf.html -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEXpvIcrLGPB3dYM2b2/3pjiVWvVwFAlnwuuIACgkQ2/3pjiVW vVzBhA//Z0F8mWp6z4ce9rFMi/9J0sm8u71/HZI4IIAOsZoaJ

Re: Breaking MIME concatenation

2018-05-16 Thread Martin
ery* email user? But there the standard today IS that mails are HTML-written and contain links and pictures and so on. If GnuPG should be a tool for "everybody" HTML mail must be encrypted and decrypted correctly by the clients and GnuPG should give any important info

Re: Vulnerable clients (was: US-CERT now issuing a warning for OpenPGP-SMIME-Mail-Client-Vulnerabilities)

2018-05-16 Thread Martin
on Canonical Ubuntu for smartphones/tablets and UBports devices. To show that developers of clients take the situation seriously one example: Today I got an update for Android R2Mail2 which fixes the #efail problem. There's still a chance ;-) -- Regards Martin pgpZi5sBPmIY2.pgp Descripti

Re: Kommentar: Efail ist ein Megafail für E-Mail-Verschlüsselung | heise online

2018-05-18 Thread Martin
Hello Matthias, Friday, May 18, 2018, 3:40:53 PM, you wrote: > Jürgen Schmidt is a dedicated OpenPGP hater. Be warned and/or just > ignore this comment. And again recommandatioin for Signal. It seems to be a PR campaign - but a very bad one. -- Best regards,

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Martin
- -- Best regards, Martin -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEE92uV/w2x7WB1p4XLsdyR185C444FAl9jgAcACgkQsdyR185C 445wzwf/QiBWBkH9UW6jzh7vbFbENQG39dBZTpK5TmG0BwRsdq72y4ccGpaCfZM9 02xSMeQ8ajPJ8luBH2cYHK+iBOQLlztl9yYj1crTYE+B0LBLWUMNlaH

Which keyserver

2020-09-17 Thread Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi list Which keyserver do you recommend these days? I have hkps://keys.openpgp.org in gpg.conf - but it seems that there are missing a lot of public keys on this server. - -- Best regards, Martin -BEGIN PGP SIGNATURE

GnuPG 2.2.32 with libgcrypt 1.8.8

2021-10-25 Thread Martin
Hi I am really not a programmer ;-) but I tried to compile GnuPG 2.2.32 on my Ubuntu 20.04 system. Before I compiled libgcrypt 1.8.8 - seems to work, no error messages. So these libreriers are going to /usr/local/lib So I tell configure for GnuPG 2.2.32 to take this libgcrypt 1.8.8 files with .

Re: GnuPG 2.2.32 with libgcrypt 1.8.8

2021-10-26 Thread Martin
Hello Bernhard, Tuesday, October 26, 2021, 9:37:47 AM, you wrote: > Am Montag 25 Oktober 2021 17:01:15 schrieb Martin: >> But after "make" and "make install" I see the the GnuPG 2.2.32 doesn't use >> libgcrypt 1.8.8 but 1.8.5 (which was installed by

Public keys stored on different server

2023-02-01 Thread Martin
k has a bad or strange https certificate... What are the reasons for such a procedure and what is the advantage? -- Best regards, Martin pgpUEqarpFiso.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnup

Re: Public keys stored on different server

2023-02-01 Thread Martin
by the key ID. It just seemed like a contradiction to me if a key for security reasons should be downloaded from a website with an insufficient certificate ;-) - -- Best regards, Martin -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEE92uV/w2x7WB1p4XLsdyR185C444FAmPaiooACgkQsdyR185C 444E1Af9Eb7h9K

Re: Public keys stored on different server

2023-02-02 Thread Martin
ever will be in accordance > with > our privacy policy. Could you please explain this, I don't understand really. So there are public and no public keys on the this key-server? Who decides that a key is public or non-public? Who or how can I request a non-public key? Martin pgpZGo

Re: Public keys stored on different server

2023-02-03 Thread Martin
Hello Vincent, Ok - that is clear now. I never had the idea to get a "whole list" from a key server but I didn't understand why people let access their key only on their own website. Martin Thursday, February 2, 2023, 9:45:53 PM, you wrote: >> Could you please

Re: German ct magazine postulates death of pgp encryption

2015-02-27 Thread Martin Behrendt
y system? How many computers are out there where not even a single part of the hardware (and firmware) is proprietary? Where do you draw the line? If I would have to guess, I would say, the device you wrote that sentence with, falls in the category semi-proprietary... greetings Martin -BEGIN P

Re: Enabling and using ECC keys (any reason not to?)

2015-03-27 Thread Martin Behrendt
milar for up to 3 different encryption methods. So especially when introducing new algorithms which might be tampered with, using e.g. an old style RSA Key as one layer and ECC as a second should help against this. Or am I missing something here? Greetings Martin

Re: Is Open PGP or GnuPG or GPG possible on a Mac?

2015-05-01 Thread Martin Behrendt
-1&q=mac+installer++site:lists.gnupg.org%2Fpipermail%2Fgnupg-users%2F2014 Looks also interesting for 2014. Maybe there will also be some results for 2015? Hope that gets you somewhere. Greetings Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYF

Re: libgrypt in Wikipedia? (help wanted)

2015-10-22 Thread Martin Behrendt
e correct information in the libgcrypt Wikipedia entry. So please put in the missing information yourself, or someone or post them on my discussion page or via e-mail (I would appreciate an easy to c/p format) and I will enter them. Greetings Martin -BEGIN PGP SIGNATURE- Versi

Re: What causes this bad signature

2015-11-15 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/11/15 20:28, Sebastian Wiesinger wrote: > Hello, [...] > > sig!3 P0x58A2D94A93A0B9CE 2015-03-27 > never Sebastian Wiesinger sig-3 > 1 0x5E5CCCB4A4BF43D7 2015-11-14 never Governikus OpenPGP > Signaturservice (Neuer Personalaus

Re: basic identity mgmt

2016-01-11 Thread Martin Behrendt
pagate the signature anyway. It's not a dealbreaker but it's > still a bit irritating. > > Thanks, > Lachlan > Without thinking a lot about it on my part, but wouldn't a separate signing sub-key help with this? Greetings Martin _

Nitrokey HSM and GPG

2016-02-24 Thread Martin Konold
fully works as expected but Nitrokey HSM fails with OpenPGgpg2 --card-status gpg: selecting openpgp failed: Card error gpg: OpenPGP card not available: Card error Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold

Re: Nitrokey HSM and GPG

2016-02-24 Thread Martin Konold
11 -new -key 0:10 -keyform engine -out cert.pem -text -x509 - days 3640 Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Registergericht: Amtsgericht Stuttg

cipher used when both --encrypt and --symmetric is specified

2016-02-25 Thread Martin Ilchev
ed data packet: length: unknown mdc_method: 2 gpg: encrypted with 1 passphrase gpg: using subkey 1234567890ABCDEF instead of primary key 1234567890ABCDEF gpg: encrypted with 4096-bit RSA key, ID 1234567890ABCDEF, created 2018-13-34 "Martin" gpg: public key decryption

Re: Decrypt without importing key to keyring

2016-02-26 Thread Martin Konold
the private key exclusivly on an OpenPGP Smartcard. This only requires a stub in the keyring which can be recreated on demand. Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - Beratende Inge

Re: cipher used when both --encrypt and --symmetric is specified

2016-02-26 Thread Martin Ilchev
CAMELLIA192 AES CAST5 CAMELLIA128 BLOWFISH IDEA 3DES personal-digest-preferences SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed s2k-digest-algo SHA512 keyserver hkps://hkps.pool.sks-keyservers.net keyserver-options ca-cert-file=/home/martin/.gnupg/sks

Re: Single GPG key and multiple yubikeys

2016-02-26 Thread Martin Konold
gent need to use two smartcards on the same computer and account I recommend to make use of scdaemon.conf and seperate GNUHOME directories. You may then differentiate between the two cards with the gpg -- homedir commandline option. Kind Regards --martin konold -- Dipl.-Physiker Martin Konold

Re: gnupg-pkcs11 status & future

2016-02-27 Thread Martin Konold
s each configured for a different USB device (scdaemon.conf) While imho pkcs#11 is ugly it really is a tool to gain interoperability while cleaning up a lot of mess (many people are confused with the current situation) and make encryption available to the masses. Kind Regards --martin konold -

Re: Single GPG key and multiple yubikeys

2016-02-27 Thread Martin Konold
ine user interface of gpg be different if the private keys reside on smartcards compared to a keyring in the filesystem? What do you think? Kind Regards --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Partnerschaftsgesellschaft Erlewein, Frank, Konold & Partner - B

Re: cipher used when both --encrypt and --symmetric is specified

2016-02-29 Thread Martin Ilchev
and --cipher-algo is not given. So CAST5 is the preferred cipher for secret keys and is also the default for symmetric. On the other hand using --personal-cipher-preferences does not seem to apply to symmetric + public encryption. Is this by design? Regards, Martin On Fri, 26 Feb 2016 at 14:52

Re: cipher used when both --encrypt and --symmetric is specified

2016-02-29 Thread Martin Ilchev
Hi Peter, Thanks for the advice. I will have a look at the mailing list. For now I am happy that I have a working solution. Thank you and Vedaal for the help. Regards, Martin On Mon, 29 Feb 2016 at 11:12 Peter Lebbing wrote: > On 29/02/16 11:51, Martin Ilchev wrote: > > So CAS

Re: Question about getting started with PGP and smart cards

2016-02-29 Thread Martin Ilchev
the above for test use but now I am using it every day at work, at home and on my laptop without any issues. I can sign, encrypt/decrypt as well as authenticate for SSH with a single smart card. Let me know if you need any additional information. Regards, Martin On Sat, 27 Feb 2016 at 17:44 A

Decryption error: open(CONOUT$) failed

2016-05-12 Thread Cyril Martin
Hello, since few days we face of an issue to decrypt files (.gpg) with GNUPG 1.4.9 We get error: *** gpg: fatal: open(CONOUT$) failed: The system cannot find the file specified. secmem usage: 0/0 bytes in 0/0 blocks of pool 0/32768 *** If issue w

GnuPG 2.0.30 console output charset

2016-06-18 Thread Martin S.
Hi list How to set GnuPG 2.0.30 configuration that the console output has the correct charset on Windows 7. The language is set to German in registry - but Umlauts are not displayed correctly. Thanks. m.s. ___ Gnupg-users mailing list Gnupg-users@gnu

GPG and Mailinglists using IBCPRE

2016-07-16 Thread Martin Konold
without directly having the private key of the mailing list on the mailing list server. What do you think about IBCPRE. Regards --martin Mit freundlichen Grüßen --martin konold -- Dipl.-Physiker Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Phys

regular update of all keys from a keyserver

2016-10-17 Thread Martin T
Hi, I am aware that one can update all the keys in local-keyring from a keyserver using "gpg --refresh-keys". Are there any disadvantages to simply put this command into user crontab and execute for example once a day? thanks, Martin ___ G

Re: regular update of all keys from a keyserver

2016-10-18 Thread Martin T
Thank you for all the replies! Martin On Mon, Oct 17, 2016 at 7:52 PM, Brian Minton wrote: > > > On 10/17/2016 11:41 AM, Daniel Kahn Gillmor wrote: >> On Mon 2016-10-17 06:31:16 -0400, Martin T wrote: >> >>> I am aware that one can update all the keys in loca

list revoked UIDs

2016-10-18 Thread Martin T
Hi, I imported a public key from keyserver which has multiple UIDs and one of those UIDs is revoked. When I execute "gpg --list-keys " then I see only active UIDs and not that one revoked UID. Is there a way to list that revoked UID? Or wasn't that imported in the first place?

Re: list revoked UIDs

2016-10-18 Thread Martin T
Thanks! This did the trick. Martin On Tue, Oct 18, 2016 at 2:29 PM, Peter Lebbing wrote: > On 18/10/16 12:42, Martin T wrote: >> Is there a >> way to list that revoked UID? > > I think it's: > > gpg --list-options show-unusable-uids --list-keys <...> &

ways to ensure that GPG public key belongs to right person in business to business communication

2016-10-26 Thread Martin T
c key belongs to right person in business to business communication? thanks, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: ways to ensure that GPG public key belongs to right person in business to business communication

2016-10-27 Thread Martin T
and asks Bob to confirm that it matches. I guess this provides reasonable security? thanks, Martin On Wed, Oct 26, 2016 at 11:51 PM, Daniel Kahn Gillmor wrote: > Hi Martin-- > > On Wed 2016-10-26 16:21:48 -0400, Martin T wrote: > >> let's say that Alice from company A

Re: Can I revitalise an old key-pair?

2013-09-02 Thread Martin Hvidberg
make yet a new key-set, and this time I'll be more organised and make a revoke certificate, that I'll keep in a safe place, together with the secret key, and the paraphrase. Again - thanks all, your a grate group. :-) Martin ___ Gnupg-user

gpg4win pinentry ignores PIN-pad

2013-10-22 Thread Martin Wolters
the card reader and I don't even get the opportunity to enter it from my keyboard by mistake. This is the way I want it. Since I don't know where to start, I attached a log from scdaemon. If you need any additional information, I will be happy to provide it. Have a good time, Martin

Re: Quotes from GPG users

2013-10-30 Thread Martin Gollowitzer
G allows for both proving a message's authenticity and preventing eavesdropping. It's one of the most important tools I use every day. I'll try to come up with a better one ASAP. Best, Martin signature.asc Description: Digital signature __

unable to use gnupg on a read-only filesystem

2013-11-17 Thread Martin Vegter
om Could somebody please advice how I can use gpg without temporary files ? many thanks, Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-19 Thread Martin Gollowitzer
omics and is therefore supposed to crash at some point. Choosing goteo was IMHO a good idea because their system is Free Software and I don't know if they even support BTC et al. Just my €0,02 Martin signature.asc Description: Digital signature _

Re: BoF at FOSDEM ?

2014-02-01 Thread Martin Paljak
Too bad I missed. Where did you get with the ECC discussion? m. -- Martin +372 515 6495 On Sat, Feb 1, 2014 at 10:32 AM, Kristian Fiskerstrand wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > [Seems my email from my cellphone got stuck in the moderator queue. So >

Re: Scute and SmartCard insertion/removal in Firefox

2014-02-05 Thread Martin Paljak
If you have a web server *and* a client where you can control the session cache and initiate a re-negotiation, Firefox will try to look at your token again. At least this was the case a while ago. -- Martin +372 515 6495 On Wed, Feb 5, 2014 at 12:58 PM, Urs Hunkeler wrote: > Hi, > >

Multiple Subkey Pairs

2014-03-13 Thread Martin Behrendt
t me can handle that, but also the people who sent me encrypted mails. (And if not, does it make sense to implement something like this in gnupg?) And a more general question: This approach generates some overhead so is there maybe a way to achieve something similar more easily? Thanks for ideas an

Re: Multiple Subkey Pairs

2014-03-13 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 13.03.2014 16:42, schrieb ved...@nym.hush.com: > > On Thursday, March 13, 2014 at 8:03 AM, "Martin Behrendt" > wrote:Hi, > >> I want to achieve the following: 1. A Master signing key 2. A >> subkey signing/e

Re: Multiple Subkey Pairs

2014-03-13 Thread Martin Behrendt
eone at least also starts thinking about the problem and comes up with a good solution. Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEAREKAAYFAlMh+CkACgkQ/6vdZgk46sg1xwCgk3b9UyFmpOvAwoPQNIIXe1L+ /d4An1j5QQzTyKWVNNQhkyWd7+ejnrOG =Cas0 -END PGP SIGNATURE- __

Re: Multiple Subkey Pairs

2014-03-17 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 17.03.2014 11:34, schrieb Robert J. Hansen: >> The YYY (->a famous three letter agency) e.g. denies to archive >> content of YYY citizens mails. It is thus perfectly reasonable to >> assume it does so with all other ones. > > This is not a reason

Re: Multiple Subkey Pairs

2014-03-17 Thread Martin Behrendt
Am 17.03.2014 17:54, schrieb Robert J. Hansen: >> That is an odd comparison. What does a statement about a fundamental >> law of physics which you can't change have to do with a statement >> about what you are doing, where you are perfectly free to do something >> else than you say? > > Try some v

Re: Multiple Subkey Pairs

2014-03-18 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 18.03.2014 15:01, schrieb Robert J. Hansen: > > My other position is that we have to be careful what we believe. > In these times it's tempting to see shadows and jump at them, > believing that we're seeing the bogeyman. We have to resist this >

Re: Multiple Subkey Pairs

2014-03-18 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 18.03.2014 19:34, schrieb Robert J. Hansen: > (1) Given how many flat wrong things get printed in the newspaper, > believing this reporting may not be wise. > While this in general is true, I really wonder why you say that in the current contex

Re: OpenPGP smartcard and RSA 8192 bit

2014-03-23 Thread Martin Paljak
No. 4k is the reasonable maximum. -- Martin +372 515 6495 On Sun, Mar 23, 2014 at 12:37 PM, -- -- wrote: > Hi! > > Just for the sake of curiosity, is it possible to store a 8192 bit RSA key > on the OpenPGP smart card? Two keys ? Three keys? > > Thank you, please in

Re: Access to www.gnupg.org only via TLS

2014-04-30 Thread Martin Gollowitzer
header. [1] http://blogs.fsfe.org/gollo/2014/04/13/what-the-heartbleed-bug-revealed-to-me/ [2] https://www.ssllabs.com/ssltest/analyze.html?d=gnupg.org Thanks, Martin signature.asc Description: Digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Managing Subkeys for Professional and Personal UIDs

2014-05-03 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 03.05.2014 05:01, schrieb Robert J. Hansen:> > And regardless of whether it's a good practice or a bad one, I've > worked in businesses that have done exactly this -- so it's a > real-world example that demonstrates the occasional need for a > thi

Re: Managing Subkeys for Professional and Personal UIDs

2014-05-04 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 04.05.2014 10:30, schrieb Robert J. Hansen: > > Are there good business reasons for third party escrow of signing > keys? Quite probably. If you can think of a situation where an > autopen is appropriate, whether in business or in government, >

Re: Managing Subkeys for Professional and Personal UIDs

2014-05-05 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 04.05.2014 12:52, schrieb Robert J. Hansen: >> No, there are no good reasons. > > If that's an axiom in your system, then so be it. But let's not > go about thinking that's something you've deduced from principles. > Well I haven't heard any so

Re: Managing Subkeys for Professional and Personal UIDs

2014-05-05 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 05.05.2014 12:55, schrieb Robert J. Hansen: > >> This is, again, rhetoric and not an argument. I explained that >> before. > > As I explained, you are choosing not to recognize the argument. > You honestly seem to think that "We are doing $A, s

Re: FAQ change, final draft

2014-08-13 Thread Martin Behrendt
answer is not possible at this time. Because they probably will become frequently asked questions in the future**. ;) But I can understand if that is going to be dealt with, when we are at that point in time. regards Martin * What will be a good default key length and why e.g. ** maybe true for some

Re: FAQ change, final draft

2014-08-14 Thread Martin Behrendt
Am 14.08.2014 um 04:32 schrieb Robert J. Hansen: > On 8/13/2014 5:22 PM, Martin Behrendt wrote: >> Because they probably will become frequently asked questions in the >> future. > > The questions experts think will be frequently asked are usually rarely > asked. :) >

Re: Fwd: It's time for PGP to die.

2014-08-18 Thread Martin Behrendt
Am 18.08.2014 um 14:31 schrieb Robert J. Hansen: > On 8/18/2014 2:01 AM, Johan Wevers wrote: >> And who determines wether it has any "testimonial value"? > > Johan, we're entering paranoid fantasy here. If you truly believe the > whole of the USG is corrupt, and that our independent judiciary is

Re: It's time for PGP to die.

2014-08-19 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 19.08.2014 um 21:16 schrieb MFPA: > Hi > > > On Monday 18 August 2014 at 8:21:06 PM, in > , Robert J. Hansen wrote: > > > >> No, the Fourth Amendment protects all people within U.S. borders >> equally. Americans get no special protections ove

Re: encrypting to expired certificates

2014-09-15 Thread Martin Behrendt
e and prevents him from revoking the key. In this case preventing someone from sending you information which might harm your well being is a good thing.* Since the sender can't know how you use the expiration date I guess the more conservative approach is the safer one if you consider extreme cases l

Re: encrypting to expired certificates

2014-09-16 Thread Martin Behrendt
me time after that date. And I think the same confusion is going on with respect to the expiration date in our context. And I am all for not overloading the meaning of words, so if I read expiration date than for me this is a dead line. If you mean "best before" than I would prefer if people say it like this. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: encrypting to expired certificates

2014-09-16 Thread Martin Behrendt
Am 16.09.2014 um 16:41 schrieb Werner Koch: > On Tue, 16 Sep 2014 12:52, martin-gnupg-us...@dkyb.de said: > >> In Germany on food products you will find the word "Expiration Date" >> which literally means: "Don't eat me after that date." But there is a

Re: emails snowden and poitras

2014-10-14 Thread Martin Behrendt
If you assume she is new to gpg I guess that is a wrong expectation. greetings Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Update on USG, Software, and the First Amendment

2014-10-28 Thread Martin Behrendt
Am 27.10.2014 um 19:20 schrieb Robert J. Hansen: > Just received word back from a friend of mine who's a law professor > focusing in electronic civil liberties, and is a former Commissioner of > the FCC to boot. He's skeptical that ITAR/EAR enforcement will affect > U.S. hackers participating in l

Re: Why the software is crap

2014-11-14 Thread Martin Behrendt
en). Maybe there is a difference between exporting the public part of a key and the private part. Anyway, enjoy your life. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Why the software is crap

2014-11-14 Thread Martin Behrendt
ust successfully created a private key, exported it, imported it with an outdated (portable) gnupg version and used it with no problems. Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: How much information can be gleaned about a gpg key by possessing both plaintext and ciphertext?

2014-11-21 Thread Martin Behrendt
o problem. google e.g.: "plain text attacks on gnupg site:gnupg.org" Greetings Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Holidays

2014-12-15 Thread Martin Behrendt
exchange rate are you at? And how do you treat multiple donations by the same person? :) Greetings Martin -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAlSPMqIACgkQ/6vdZgk46si53wCgyNkYByjSaZkgwOP+/DmUlWgE cjQAoKK0eSbhDTmMyUStPJmMvhxV1f7L =N8kD -END

Re: emulating smartcard with Nexus 5

2015-02-13 Thread Martin Paljak
non-Android-GUI issues. Martin -- Martin +372 515 6495 On Fri, Feb 13, 2015 at 1:55 AM, NIIBE Yutaka wrote: > Hello, > > Let me record a bit of history. > > On 02/13/2015 01:19 AM, Brian Minton wrote: >> I recently got a new Nexus 5, with NFC. Supposedly it supports ISO >

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-17 Thread Martin Paljak
folks and somebody on the internet has, I would not blame GPGTools guys for doing it. Yes, it would be nice if one at least tried to contribute back to upstream and to work in an open manner, but at least they DO something, for what there is apparent need. Martin ___

Re: New results against SHA-1

2009-05-03 Thread Martin Ågren
.. SHA-3, on the other hand, will be very well-studied when it becomes a standard, so we should in a way be able to trust it as much as we trust AES. Google "SHA-3 competition" for more information. Take care! Martin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

key generation: email-address necessary?

2010-02-26 Thread Martin Bretschneider
with this behavoir? Can email clients find out what key to use if there is no known email address? What do you think? Kind regards from the CeBIT town;) Martin -- http://www.bretschneidernet.de/OpenPGP-key: 0x4EA52583 _o)(o_ Albert Einstein

Re: key generation: email-address necessary?

2010-02-27 Thread Martin Bretschneider
Am Samstag 27 Februar 2010 schrieb Laurent Jumet: Hi Laurent, > Martin Bretschneider wrote: > > I want to recreate my GnuPG keys. My question is if I can omit the > > email address? Since I do not want my email addresses to appear on > > the keyservers because of spammers a

Re: key generation: email-address necessary?

2010-02-27 Thread Martin Bretschneider
Am Samstag 27 Februar 2010 schrieb Laurent Jumet: > Hello Martin ! > > Martin Bretschneider wrote: > >> You can use whatever you want to identify your key. > >> But in some cases, mail programs expect to find your e-mail. > > > > that was my exp

Re: What is the benefit of signing an encrypted email

2011-01-11 Thread Martin Gollowitzer
heck if that message was really sent by you. If it's only encrypted, there is no proof for that since everyone who knows the recipient's public key can encrypt messages for this particular person. All the best, Martin -- The early worm is for the birds. pgp5z5w27fqOS.pgp Desc

Problems with pcsc-lite 1.6.6 and Cherry ST-2000U

2011-01-11 Thread Martin Gollowitzer
scdaemon reports an unknown PC/SC error code. This is all I could find out. I also tried to disable the internal CCID driver, but this didn't change anything. I still receive different error messages (like "no card found" although the card is inserted). Any hints what I could do?

Re: Prosecution based on memory forensics

2011-01-13 Thread Martin Gollowitzer
* freej...@is-not-my.name [110113 11:35]: > P.S. Robert, how about trimming your line lengths! Apple Mail sucks at this ;) Martin smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org h

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Martin Gollowitzer
hose only claiming to support MIME). I think this would be really great. Do you think it's worth the effort to contact the developers of Thunderbird/Enigmail, Mutt, Gnus and some others that support OpenPGP about this? Thanks, Martin -- For extra security, this message ha

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
ogether with APG). But K9 only supports inline-PGP, PGP/MIME > messages are not displayed. This is true, but K9 at least does display the messages correctly. Despite that, PGP/MIME support is being worked on because it's considered better than inline PGP. Martin pgp5TiVUPmun3.pgp Des

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
is the case. Nevertheless, your statement is not true as such. PGP/MIME *does* work, but there are MUAs out there which can't cope with it. Martin pgpZ7aij3sSJ8.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://li

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
* Daniel Kahn Gillmor [110225 18:31]: > On 02/25/2011 12:11 PM, Martin Gollowitzer wrote: > > * Patrick Brunschwig [110225 10:10]: > >> The only mail client on Android I know of to handle OpenPGP messages is > >> K9 (together with APG). But K9 only supports inline-PGP,

Re: PGP/MIME considered harmful for mobile (Jameson Rollins)

2011-02-25 Thread Martin Gollowitzer
* Avi [110225 19:21]: > For those of us who use webmail, inline signatures are rather > useful. There are webmail applications supporting PGP/MIME. If yours doesn't, it is not a good one. Inline signatures are not a good thing IMHO. Martin pgpPpk4wPE5Xj.pgp Description: PG

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
res. Despite that, there are MUAs which do not automatically parse every message completely to see if there's inline PGP content in them, but if the see that a message uses PGP/MIME they immediately try to decrypt/verify the message. Martin pgpJv55KyzBlt.

Re: [SOLVED] SCR3310 reader working for root, but not scard group

2011-02-27 Thread Martin Gollowitzer
. [1] http://download.fsfe.org/tools/cardreader/udev-howto-automatization.sh [2] http://wiki.fsfe.org/Card_howtos/Card_with_subkeys_using_backups All the best, Martin pgpRWFRaMoTaW.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnu

Re: Smart Card Physical Best Practices?

2011-02-27 Thread Martin Gollowitzer
reader if some malware script or something weird tries to run gpg > commands while the card is activated. My multitasking capabilities are not good enough for parallely working on my PC and always watching my card reader at the same time ;-) Martin pgpGEbCqRyk43.pgp Description: PGP signatu

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
* David Tomaschik [110227 19:22]: > How about "inline confuses users who don't know anything about OpenPGP"? 100% agreed. Thank you! Martin pgpOXtxwgzgho.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-us

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
lace). > 2. And seeing strange MIME attachments doesn't confuse people? Less than strange text fragments at the head and the bottom of a message (Some people even think they are being spammed when they see inline PGP data), because an attachment without useful data will rather be ignored.

Re: keyservers

2011-03-17 Thread Martin Gollowitzer
get NS records again, but lookup of the pools doesn't work. Martin pgp6C9Hm4NnQN.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Keyservers

2011-03-20 Thread Martin Gollowitzer
sfe.org/Fellows/mk/EmailGuide [2] http://en.wikipedia.org/wiki/Posting_style [3] http://www.guckes.net/mail/editing.html Martin pgpzM6GEPIAHL.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/m

  1   2   >