Re: New GUI frontend for windows

2013-12-30 Thread MFPA
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Friday 27 December 2013 at 2:22:25 PM, in
mid:425978187.20131227142225@my_localhost, MFPA wrote:



 I suspect importing keys didn't work for me. I saw no
 changes in the UI.


I think something in my gpg.conf may have been the problem, as it sort
of went away shortly after I renamed the file for testing and came
back when I renamed the file back.


- --
Best regards

MFPAmailto:expires2...@ymail.com

Don't cry because it is over - smile because it happened
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlLB4XtXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pL+QD/Rlmlghsqm10pyE144WL8NAfd8+Dudh0rhhJ
ow5W95Zi4VdEx2HkpqrQoTNwOT/8/doYUdsgnj7co+w3ToHnOWxyGnRlAwlpc0xx
hzT1OWrXHq0T3QiY+d1w0GtaWHI9uv5HgmTp62WAcC7+qz4zfE+gILexsoEXTznW
vOdTXSlu
=aVhZ
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-27 Thread Werner Koch
On Thu, 26 Dec 2013 13:00, je...@seibercom.net said:

 I certainly don't want to start a flame war here; however, if you are so
 unequivocally anti proprietary software, then why do you even allow a
 version of your product to be created that will run on it. That is

If you mean why we create software which runs on proprietary operating
systems like VMS, AIX, Ultrix, HP/UX, SunOS, Windows, etc. there are two
related reasons for it: In the early days of modern free software, there
was no computer which entirely runs on free software.  A few hackers
worked on making that a reality and succeeded by ~1992 by introducing
GNU/Linux and freed BSD systems.  Unfortunately by that time the major
operating system was Windows which was entirely different to the now
free Unix systems.  To help people, who were forced to use Windows,
several software projects were ported to Windows.  This helped Windows
users to get _some_ freedom back - Mozilla is probably the best known
example.

If it sometimes sounds like we are all anti-proprietary software, this
is likely caused by the rules the GPL camp implies on their software.
The goal of the GPL and other copyleft licenses is to keep the software
free and avoid a re-proprietarization of it.



Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-27 Thread MFPA
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Friday 27 December 2013 at 4:31:08 AM, in
mid:snt148-w547fcde5571a61b0d8a430bf...@phx.gbl, Alice Bob wrote:


 I did try it on XP without
 noticeable problems. Besides the 'unexpected'
 behavior, did you have any other issues?

The only clickable items are Help, public key, private key, make new
keys. At no point do encrypt, verify signature, decrypt, or sign become
clickable.

When importing keys, there is a Continue option which is
clickable, but clicking it appears to do nothing.



 But the key
 has the unexpected UID
 Yes, if you don't specify a name a 'random' one will be chosen for
 you,this is to ease on two new users that exchange keys

The random number makes some sort of sense but in my experience the
obviously fake email address is more a curse than a blessing. When I
get around to replacing my key, the new one will not have the a@b.c
(or any real or fake email address).



 and will
 expect a change in the ui when importing a key.

I suspect importing keys didn't work for me.
I saw no changes in the UI.



 Why have you chosen not to go
 with the GnuPG default capabilities: encrypt only for the subkey and
 sign+certify for the master.
 Those are the defaults for unattended key generation.

Interesting. Are you specifying the key algo as Default or as RSA?
If the latter, you can define the usage flags list yourself (but
certify is mandatory for the master key).


- --
Best regards

MFPAmailto:expires2...@ymail.com

Why is the universe here? Well, where else would it be?
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlK9jTlXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pGK4D/1d7PYiSjpCszNqI5GTwoJ2grt3c5IWdJ2kc
oTn/I1j1H/S7ZH45gIZhjK/pVB5aX3LQaH6q74ytuSDJiIV2GuhAtVhl3Nr3NN51
RT1fMqr9qEkHibPaCcjw3KCXvTffmKPdSe54/tSTSsLQoziHyVny/aCPyqWVe99u
JSdhs6vB
=0DJJ
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread Jerry
On Wed, 25 Dec 2013 12:50:50 -0500, Robert J. Hansen stated:

 On 12/25/2013 7:49 AM, Alice Bob wrote:
  It is closed source, unlimited trialware.
 
 (a) If you're asking people to provide feedback and bug reports for
 closed-source software, you're asking people to help you make a buck
 without giving them much of anything in return.  I find that
 unethical. I don't find closed-source software unethical, mind you,
 but if you're going to write closed-source software then, IMO, you
 need to take responsibility for doing SQA without community
 assistance.
 
 (b) Without source, there's no way I will trust it.
 
 (c) The web page asks, Can I trust you?, and you answer it with
 YES!.  Sorry, but no.  The only correct answer to Can I trust you?
 is, You need to figure that out for yourself.  In my experience,
 people who answer that question yes are usually deeply
 untrustworthy.
 
 (d) As a closed-source product, this should not be advocated on
 GnuPG-Users.  GnuPG is a GNU project, and they have some quite serious
 philosophical beliefs about the moral evils of closed-source software.
 Let's respect the GNU position by not advocating closed-source
 software on this list.

I certainly don't want to start a flame war here; however, if you are so
unequivocally anti proprietary software, then why do you even allow a
version of your product to be created that will run on it. That is
certainly not a consistent approach.

-- 
Jerry

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread Jerry
On Wed, 25 Dec 2013 19:04:22 -0500, Ryan Sawhill stated:

  I wanted to create an easy to use gui for GnuPG. Without installing,
  choosing options, and just working from the get-go.
 
 I appreciate your sentiment but I absolutely agree with what everyone
 else has said. Expecting people to use closed-source crypto software
 in 2013 would be a little like expecting people to only buy their
 music (contained in a limited-life wasteful physical container like a
 CD) in-person at a big chain store.. or to only rent movies in-person
 at Blockbuster -- namely, unrealistic at best.
 
 And as you might have guessed after the first few comments: I can
 tell you right now you're not going to get anyone subscribed to this
 list to try it.

Ryan Sawhill, lets get something straight. I don't speak for you and
you do not speak for me. You are most certainly free to express your
own sentiments; however, they are only yours, not mine nor anyone
else's.

-- 
Jerry

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread Johan Wevers
On 26-12-2013 13:00, Jerry wrote:

 I certainly don't want to start a flame war here; however, if you are so
 unequivocally anti proprietary software, then why do you even allow a
 version of your product to be created that will run on it. That is
 certainly not a consistent approach.

Most people in the free software world believe in freedom - the freedom
to use software as we see fit and to adapt it to our requirements. Not
in taking someone else's freedoms away. If someone wants to run GnuPG on
windows - that's what you're asking - why should one remove the freedom
to do so?

As a practical matter, not distributing windows binaries would get
Werner many questions for it and for help from people who tried to port
/ compile it on windows because the demand is there. To prevent such a
non-productive situation windows binaries could be distributed as only
to prevent all this trouble. Werner has also only 24hours in one day.
I'm not saying this is the reason to distribute windows binaries but it
would certainly be a practical reason to do so, if no other reasons
(like increased security for everyone if the large number of windows
users would also be able to use GnuPG).

-- 
Met vriendelijke groet / With kind regards,
Johan Wevers

PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread Robert J. Hansen
I really wish people would read my emails before responding to them.

 I certainly don't want to start a flame war here; however, if you
 are so unequivocally anti proprietary software...

I'm not, as I said in that message -- a part which you quoted, even:

 I don't find closed-source software unethical, mind you...

I also (correctly) attributed the anti-proprietary mindset to GNU, not
to me:

 GnuPG is a GNU project, and they have some quite serious 
 philosophical beliefs about the moral evils of closed-source 
 software.  Let's respect the GNU position by not advocating 
 closed-source software on this list.

Finally,

 why do you even allow a version of your product to be created that
 will run on [proprietary OSes].

GnuPG is not my product.  I am not a GnuPG developer.  I am not a GnuPG
maintainer.  I have never contributed one line of code to GnuPG.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Wednesday 25 December 2013 at 10:05:43 PM, in
mid:52bb56b7.2090...@dougbarton.us, Doug Barton wrote:


 Not to mention it's dramatically more difficult (some
 would argue  impossible) to develop trust in a
 pseudonym.

I say it makes no difference whether somebody goes by the name their
government recognises, or by a pseudonym chosen by themself (or their
friend/colleague/enemy). Unless I am entering into a contract and may
be unable to hold them to account without using (or at least knowing)
their legal name.

- --
Best regards

MFPAmailto:expires2...@ymail.com

Never trust a dog with orange eyebrows
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlK8yVRXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pBoQD/05UMhuu662VX3agFLR+k4a0kKH9HCA0AK0X
4cOq2hXiCODZ33jPunDvxNZdfHEHSRaQ6zz4rmtVXyKUJp2Wfzxi8CHoSQmXSrN4
u+5Ni7xMRruuz62ewnmMoBlgWtblU/hvDNPKHPQVCwoKzh8c8xRdlzGJvSL4I419
G0taPvVh
=IRah
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Wednesday 25 December 2013 at 12:49:47 PM, in
mid:snt148-w26880c9e58512b4c8b9112bf...@phx.gbl, Alice Bob wrote:




 I wanted
 something to quickly load the key, encrypt the message,
 and send it away. It is closed source, unlimited
 trialware. Ty.

Maybe you have written this for a newer Windows version than my XP.
The only thing I could get Encreep to do was create a new key. The
result was a 2048-bit RSA key with a 2048-bit RSA subkey. The subkey
is flagged to encrypt, sign, and authenticate, the main key can
encrypt, sign, authenticate and certify. Why have you chosen not to go
with the GnuPG default capabilities: encrypt only for the subkey and
sign+certify for the master.

The interface says entering a name, an email address, and a
password are optional - I chose not to exercise that option, and got
(as expected) a key with an empty passphrase. But the key has the
unexpected UID of Alice Bob 4234 m...@example.com.


- --
Best regards

MFPAmailto:expires2...@ymail.com

A closed mouth gathers no foot
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlK82sRXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5peU4D/RMj5fQU95Ll2kUOjQajB0ycPSV9mLTImlJ1
hc009maZ55tDMohK1pAPc0QoUh7sRSNg0l81hdrr3TyoBuZZe5rfrTIpJH1ragla
4LqeY1CqCciyuRQUbCMgixQQfqww1JJklwxjRlZ9Qu6mcNYgK4AScMrE4+px9WS7
dhAA2X9y
=T+L6
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


RE: New GUI frontend for windows

2013-12-26 Thread Alice Bob
 Maybe you have written this for a newer Windows version than my XP.I did try 
 it on XP without noticeable problems. Besides the 'unexpected' behavior, did 
 you have any other issues?
 But the key has the
 unexpected UID
Yes, if you don't specify a name a 'random' one will be chosen for you,this is 
to ease on two new users that exchange keys and will expect a change in the ui 
when importing a key.
 Why have you chosen not to go
 with the GnuPG default capabilities: encrypt only for the subkey and
 sign+certify for the master.
Those are the defaults for unattended key generation.

Thanks.
  ___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


New GUI frontend for windows

2013-12-25 Thread Alice Bob



I wanted to create an easy to use gui for GnuPG. Without installing, choosing 
options, and just working from the get-go.
I appreciate any feedback (and bugs), you can check it at: 
https://www.encreep.com
The main use case is for encrypting/decrypting, and not identity verification. 
That is why the trust model is discarded.I feel unless your adversary is a 
government, getting the public key from a website / email / forum post should 
be fine (situational trust).
I wanted something to quickly load the key, encrypt the message, and send it 
away.
It is closed source, unlimited trialware.
Ty.
  ___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-25 Thread Anthony Papillion


On 12/25/2013 06:49 AM, Alice Bob wrote:
 I wanted to create an easy to use gui for GnuPG. Without installing,
 choosing options, and just working from the get-go.
 
 I appreciate any feedback (and bugs), you can check it at:
 https://www.encreep.com
 
 The main use case is for encrypting/decrypting, and not identity
 verification. That is why the trust model is discarded.
 I feel unless your adversary is a government, getting the public key
 from a website / email / forum post should be fine (situational trust).
 
 I wanted something to quickly load the key, encrypt the message, and
 send it away.
 
 It is closed source, unlimited trialware.

Looks interesting. There's definitely room for improvement in the
encryption tools market and Encreep is a move in the right direction.
That said, there is no way in hell I would ever use it. Why? It's closed
source.

With everything going on with the NSA and other agencies these days,
someone would have to be insane to use a black box encryption solution.
Consider making it open source and I think you might have a winner.

Anthony

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-25 Thread Robert J. Hansen
On 12/25/2013 7:49 AM, Alice Bob wrote:
 It is closed source, unlimited trialware.

(a) If you're asking people to provide feedback and bug reports for
closed-source software, you're asking people to help you make a buck
without giving them much of anything in return.  I find that unethical.
 I don't find closed-source software unethical, mind you, but if you're
going to write closed-source software then, IMO, you need to take
responsibility for doing SQA without community assistance.

(b) Without source, there's no way I will trust it.

(c) The web page asks, Can I trust you?, and you answer it with
YES!.  Sorry, but no.  The only correct answer to Can I trust you?
is, You need to figure that out for yourself.  In my experience,
people who answer that question yes are usually deeply untrustworthy.

(d) As a closed-source product, this should not be advocated on
GnuPG-Users.  GnuPG is a GNU project, and they have some quite serious
philosophical beliefs about the moral evils of closed-source software.
Let's respect the GNU position by not advocating closed-source software
on this list.




___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


RE: New GUI frontend for windows

2013-12-25 Thread Alice Bob
Yep those are all valid points, and the issue of closed source vs open source 
vs crypto has been discussed many times before encreep, and there is nothing 
new for me to add on that.
I personally use a lot of closed software on my machine, it does not bother me 
as much.


  ___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-25 Thread Doug Barton

On 12/25/2013 09:50 AM, Robert J. Hansen wrote:

(c) The web page asks, Can I trust you?, and you answer it with
YES!.  Sorry, but no.  The only correct answer to Can I trust you?
is, You need to figure that out for yourself.  In my experience,
people who answer that question yes are usually deeply untrustworthy.


Not to mention it's dramatically more difficult (some would argue 
impossible) to develop trust in a pseudonym.




___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-25 Thread Mikhail Morfikov
On Wed, 25 Dec 2013 18:30:29 +
Alice Bob cont...@encreep.com wrote:

 Yep those are all valid points, and the issue of closed source vs
 open source vs crypto has been discussed many times before encreep,
 and there is nothing new for me to add on that. I personally use a
 lot of closed software on my machine, it does not bother me as much.
 
   
   

I will never trust a closed source app when it says that it guards my
privacy. It's simple -- if you don't know how something works, how can
you be sure that it doesn't do things that it shouldn't do? This is
unacceptable, especially when it comes to privacy and security. Just
think about it -- we can take care of you, and the only one thing you
have to do is to trust us. I think NSA said so. :)


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: New GUI frontend for windows

2013-12-25 Thread Ryan Sawhill
 I wanted to create an easy to use gui for GnuPG. Without installing,
 choosing options, and just working from the get-go.

I appreciate your sentiment but I absolutely agree with what everyone else
has said. Expecting people to use closed-source crypto software in 2013
would be a little like expecting people to only buy their music (contained
in a limited-life wasteful physical container like a CD) in-person at a big
chain store.. or to only rent movies in-person at Blockbuster -- namely,
unrealistic at best.

And as you might have guessed after the first few comments: I can tell you
right now you're not going to get anyone subscribed to this list to try it.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users