Re: Meaning of "text user ID's"?

2017-02-02 Thread Werner Koch 
On Wed,  4 Jan 2017 14:53, pe...@digitalbrains.com said:

> "Really sign all text user IDs? (y/N)"

> So how come that the jpeg image is about to be signed as well? What
> does "TEXT user ID" mean? I would have expected only the other UID's
> to be signed. Is this a bug in my head or in the code?

I think this patch is wrong:

commit a74aeb5dae1f673fcd98b39a6a0496f3c622709a
AuthorDate: Fri Nov 6 13:14:57 2015 +0100

gpg: Add new option --only-sign-text-ids.

* g10/options.h (opt): Add field only_sign_text_ids.
* g10/gpg.c (enum cmd_and_opt_values): Add value oOnlySignTextIDs.
(opts): Handle oOnlySignTextIDs.
(main): Likewise.
* g10/keyedit.c (sign_uids): If OPT.ONLY_SIGN_TEXT_IDS is set, don't
select non-text based IDs automatically.
(keyedit_menu): Adapt the prompt asking to sign all user ids according
to OPT.ONLY_SIGN_TEXT_IDS.
* doc/gpg.texi: Document the new option --only-sign-text-ids.

GnuPG-bug-id: 1241
Debian-bug-id: 569702

In particular 

if (opt.only_sign_text_ids)
  result = cpr_get_answer_is_yes
("keyedit.sign_all.okay",
 _("Really sign all user IDs? (y/N) "));
else
  result = cpr_get_answer_is_yes
("keyedit.sign_all.okay",
 _("Really sign all text user IDs? (y/N) "));

looks wrong.


Salam-Shalom,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


pgpvg0QgdiLND.pgp
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Meaning of "text user ID's"?

2017-01-04 Thread Kristian Fiskerstrand 
On 01/04/2017 03:00 PM, Peter Lebbing wrote:
> On 04/01/17 14:56, Kristian Fiskerstrand wrote:
>> What gives you the indication that the UAT is about to be signed?
> 
> First and foremost, that it was actually signed when I agreed. I deleted the
> signature afterwards.
> 
> Secondly, I just posted again with a bit more readable text :-). You can 
> clearly
> see it is proposing to do it.
> 

Gotcha :)


-- 

Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk

Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Nil desperandum
Never give up



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Meaning of "text user ID's"?

2017-01-04 Thread Peter Lebbing 
On 04/01/17 14:56, Kristian Fiskerstrand wrote:
> What gives you the indication that the UAT is about to be signed?

First and foremost, that it was actually signed when I agreed. I deleted the
signature afterwards.

Secondly, I just posted again with a bit more readable text :-). You can clearly
see it is proposing to do it.

Cheers,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Meaning of "text user ID's"?

2017-01-04 Thread Peter Lebbing 
(Ah, isn't that nice, Enigmail reformats the message when I do a signature.
Manually restored some sanity)

I'm signing keys after a keysigning party, using GnuPG 2.1.16. Issuing
--edit-key sign, I'm asked:

"Really sign all text user IDs? (y/N)"

Now here's what I see (anonymized):

> gpg (GnuPG) 2.1.16; Copyright (C) 2016 Free Software Foundation, Inc. This
> is free software: you are free to change and redistribute it. There is NO
> WARRANTY, to the extent permitted by law.
>
>
> pub  rsa4096/ created: 2015-10-11  expires: never  usage: SC
> sub  rsa4096/ created: 2015-10-11  expires: never  usage: E
> sub  rsa4096/ created: 2015-10-15  expires: never  usage: S
> [ unknown] (1). Bob Alisson 
> [ unknown] (2)  Bob Alisson 
> [ unknown] (3)  Bob Alisson 
> [ unknown] (4)  Bob Alisson 
> [ unknown] (5)  [jpeg image of size 8148]
>
> Really sign all text user IDs? (y/N) y
>
> pub  rsa4096/
>  created: 2015-10-11  expires: never usage: SC
>  Primary key fingerprint: [...]
>
>  Bob Alisson 
>  Bob Alisson 
>  Bob Alisson  
>  Bob Alisson 
>  [jpeg image of size 8148]
>
> Are you sure that you want to sign this key with your key "Peter Lebbing
> " (AC46EFE6DE500B3E)

So how come that the jpeg image is about to be signed as well? What does "TEXT
user ID" mean? I would have expected only the other UID's to be signed. Is this
a bug in my head or in the code?

Cheers,

Peter.

PS: Alice is Bob's forebear.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Meaning of "text user ID's"?

2017-01-04 Thread Kristian Fiskerstrand 
On 01/04/2017 02:53 PM, Peter Lebbing wrote:
> So how come that the jpeg image is about to be signed as well? What does "TEXT
> user ID" mean? I would have expected only the other UID's to be signed. Is 
> this
> a bug in my head or in the code?

What gives you the indication that the UAT is about to be signed? (can
try it and not save/delete public key without publishing to see actual
result)

-- 

Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk

Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Cogito ergo sum
I think, therefore I am



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Meaning of "text user ID's"?

2017-01-04 Thread Peter Lebbing 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

I'm signing keys after a keysigning party, using GnuPG 2.1.16. Issuing
- --edit-key sign, I'm asked:

"Really sign all text user IDs? (y/N)"

Now here's what I see (anonymized):

> gpg (GnuPG) 2.1.16; Copyright (C) 2016 Free Software Foundation, Inc. This
> is free software: you are free to change and redistribute it. There is NO
> WARRANTY, to the extent permitted by law.
> 
> 
> pub  rsa4096/ created: 2015-10-11  expires: never
> usage: SC sub  rsa4096/ created: 2015-10-11  expires: never
> usage: E sub  rsa4096/ created: 2015-10-15  expires: never
> usage: S [ unknown] (1). Bob Alisson  [ unknown] (2)  Bob
> Alisson  [ unknown] (3)  Bob Alisson
>  [ unknown] (4)  Bob Alisson
>  [ unknown] (5)  [jpeg image of size 8148]
> 
> Really sign all text user IDs? (y/N) y
> 
> pub  rsa4096/ created: 2015-10-11  expires: never
> usage: SC Primary key fingerprint: [...]
> 
> Bob Alisson  Bob Alisson  Bob Alisson
>  Bob Alisson  [jpeg image of
> size 8148]
> 
> Are you sure that you want to sign this key with your key "Peter Lebbing
> " (AC46EFE6DE500B3E)

So how come that the jpeg image is about to be signed as well? What does "TEXT
user ID" mean? I would have expected only the other UID's to be signed. Is this
a bug in my head or in the code?

Cheers,

Peter.

PS: Alice is Bob's forebear.

- -- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 
-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEZQCNwiCq4qJXTWzVlp4Bj95s3KEFAlhs/l8ACgkQlp4Bj95s
3KGoegf+LnnLUUmT6sYfXI4k1N/6EvRI9oU/7D2oTLEDAsVbPu/9AWSanSjy4703
02C2d68pk4gNognO7VYnou0o6isn8ryogrG0YvcgN3jNVeUcNBN0QJkvxVGM8sHK
KEvTUYk3YxO98Zce5QiYIGGgzqp8Df97ZNR/6c25zrEbSv2TBVLAOkiEYkKdmRlB
lON7CwYB2b/NuMVTABdKdOmizAzWUKDaCcFQQrqncShkBWHOv6q9uGApNxDGY/ZJ
Mfnan4Uqx4mfvsSQgdHOx5qZ7LVq+1O/jzySr5JMo8CUu59Y8r27fnyQ8z964Jzm
OwWMI4gXEHrYOsQk93R0IZDBza+Hbw==
=Vl/k
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users