Re: Best practice for periodic key change?

2011-05-10 Thread Jerome Baum
On Tue, May 10, 2011 at 07:42, Grant Olson k...@grant-olson.net wrote: On 5/10/2011 1:35 AM, Jerome Baum wrote: AFAIK, the CAs over here will just supply a card. There is no question of whether the key is generated on-card or not -- the CA confirms this implicitly with their certification

Re: Problem with the pgp to gpg key migration

2011-05-10 Thread Andreas Heinlein
Am 09.05.2011 14:43, schrieb Pramod.R: Hi, I tried migrating the public and the private key from the pgp(6.5.8) keyring to the gpg(1.4.11) by following the below commands: 1) Tried exporting the private and the public key from pgp using the commands: pgp -kx pubkey.pgp

Re: Best practice for periodic key change?

2011-05-10 Thread Jerome Baum
On Tue, May 10, 2011 at 07:42, Grant Olson k...@grant-olson.net wrote: Okay, yeah, if the CA sets up the card, authenticates it with their signing key, and ships it to you, then there would never be a separate master key, no problem there. I get the feeling the card won't like it if you try

PGP and Smart Cards

2011-05-10 Thread Mike Acker
The Basic Error is in giving the merchant your credit card number. You are spreading that number all over Boston and the thugs are gonna grab it and help themselves. The only surprising thing is that this doesn't happen more often. All that a thug needs is a Merchant Account with PCI and he

PGP Help Require Basic

2011-05-10 Thread Aakash
Hi folks, Well, I have got to encrypt/decrypt the files using Open PGP. Now I have got PGP key block and Pgp KEY from other party. I have also installed GPG on my local machine. but i really dont have any idea what to do next. Please let me know what to do with PGP key (0xAJ7A9B41) and PGP key

Re: PGP Help Require Basic

2011-05-10 Thread Kevin Kammer
On Tue, May 10, 2011 at 04:32:24PM +1000 Also sprach Aakash: Hi folks, Well, I have got to encrypt/decrypt the files using Open PGP. Now I have got PGP key block and Pgp KEY from other party. I have also installed GPG on my local machine. but i really dont have any idea what to do next.

Re: Best practice for periodic key change?

2011-05-10 Thread Hauke Laging
Am Dienstag, 10. Mai 2011, 07:10:42 schrieb Jerome Baum: an option for GnuPG: reject-subkey-signatures No need to change OpenPGP for this. This is possible only if it is safe for old implementations. I see one option for that: A signature notation for this purpose could be defined and this

Re: PGP Help Require Basic

2011-05-10 Thread Hauke Laging
Am Dienstag, 10. Mai 2011, 08:32:24 schrieb Aakash: Well, I have got to encrypt/decrypt the files using Open PGP. Now I have got PGP key block and Pgp KEY from other party. I have also installed GPG on my local machine. but i really dont have any idea what to do next. Please let me know

Re: Best practice for periodic key change?

2011-05-10 Thread Jerome Baum
I don't see why it would need a standards change, or why the option can't be, well, optional. We aren't trying to force all gpg installations to conform, but to make it possible to configure an installation to conform. Normal gpg should continue to function. (Mobile/Handy) Am 10.05.2011 15:33

Re: PGP and Smart Cards

2011-05-10 Thread Mark H. Wood
Good luck. The merchants don't seem to care, and the banks still think that the name of my third-grade teacher is some kind of closely guarded secret. It's not going to happen unless required by law or in response to some hugely expensive (and successful) class actions against card issuers. The

Re: Problem with the pgp to gpg key migration

2011-05-10 Thread vedaal
Pramod.R Pramod.R at target.com wrote on Mon May 9 14:43:06 CEST 2011 : 1) Tried exporting the private and the public key from pgp using the commands: pgp -kx pubkey.pgp pgp -kx sec.pgp ~/.pgp/secring.skr pgp commandline makes it extremely difficult to

Re: PGP and Smart Cards

2011-05-10 Thread Scott Lambdin
On Tue, May 10, 2011 at 1:54 PM, Mark H. Wood mw...@iupui.edu wrote: The customer is the only one with a compelling incentive to change the system. Why? Are not the Pay Card companies on the hook for most of the losses? -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Asking

Re: PGP and Smart Cards

2011-05-10 Thread Thomas Harning Jr.
On Tue, May 10, 2011 at 2:31 PM, Scott Lambdin lop...@gmail.com wrote: On Tue, May 10, 2011 at 1:54 PM, Mark H. Wood mw...@iupui.edu wrote:  The customer is the only one with a compelling incentive to change the system. Why?  Are not the Pay Card companies on the hook for most of the

re: Problem with the pgp to gpg key migration

2011-05-10 Thread vedaal
Pramod.R Pramod.R at target.com wrote on Mon May 9 14:43:06 CEST 2011 : 1) Tried exporting the private and the public key from pgp using the commands: pgp -kx pubkey.pgp pgp -kx sec.pgp ~/.pgp/secring.skr - remembered the workaround: [1] copy secring.skr to a different location

secret key not available

2011-05-10 Thread Yard, John
I exported a key that was needed by a bank from a pgp 6.5.8 secret keyring and inported into gpg using -import . Now when I sign using that key I get 'signing failed: secret key not available'. In gpg I see the key when I do a gpg -list-keys, But don't see it when I do a gpg -list-secret-keys.

Re: secret key not available

2011-05-10 Thread Doug Barton
On 05/10/2011 18:43, Yard, John wrote: I exported a key that was needed by a bank from a pgp 6.5.8 secret keyring ... When I cat the exported key asc block It describes itself as a public key. So I think you've described the problem ... you didn't export the secret key, you exported the