[Announce] Libgpg-error 1.11 released

2013-02-25 Thread Werner Koch
Hi! I am pleased to announce version 1.11 of libgpg-error, a library for common error values and messages in GnuPG components. If you want to use this library for you own project, please chime in and gnupg-devel so that we can discuss whether it makes sense to add a new source identifier. This

Re: options files

2013-02-25 Thread Michael Hannemann
On Feb 24, 2013, at 6:58 PM, Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 02/21/2013 07:50 AM, John A. Wallace wrote: Can I get a link discussing one or more of a typical situations when options files are used? Thanks Some of us are collecting best practice suggestions over here:

Re: options files

2013-02-25 Thread Avi
On Mon, Feb 25, 2013 at 10:48 AM, Michael Hannemann mhannem...@meperia.com wrote: On Feb 24, 2013, at 6:58 PM, Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 02/21/2013 07:50 AM, John A. Wallace wrote: Can I get a link discussing one or more of a typical situations when options files

Re: US banks that can send PGP/MIME e-mail

2013-02-25 Thread Mark H. Wood
Well, there is a way to find out whether it works. Those who care deeply about this should get together, raise some capital, and open NerdBank(tm) where they can do business their way, and see how it goes. There's plenty of room right now for people who want to reimagine the retail banking

Re: US banks that can send PGP/MIME e-mail

2013-02-25 Thread Anonymous Remailer (austria)
Why does the business case work in Germany? It doesn't. It works for one particular bank. It doesn't work for Germany as a whole. Where does this idea that a business case must be recognized by all suppliers for an entire industry in a whole country before it works? A business case can be

Questions about OpenPGP best practices

2013-02-25 Thread Peter Loshin
Many thanks to Daniel Kahn Gillmor for pointing to the best practices page (https://we.riseup.net/riseuplabs+paow/openpgp-best-practices); this information is very helpful. Some questions about the information on this page: 1. Don't use pgp.mit.edu. Which keyserver *should* be used? I assume

Re: options files

2013-02-25 Thread Craig Ringer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/25/2013 11:48 PM, Michael Hannemann wrote: Fantastic tips, thank you. As to the always set an expiration date, I certainly wish I had the first time I created a GPG key for my personal account, since that was several inattentive years ago,

Re: US banks that can send PGP/MIME e-mail

2013-02-25 Thread Robert J. Hansen
On 02/25/2013 03:20 PM, Anonymous Remailer (austria) wrote: Where does this idea that a business case must be recognized by all suppliers for an entire industry in a whole country before it works? No one, but your statement seemed to be a severe overgeneralization. Declaring that something

Re: Questions about OpenPGP best practices

2013-02-25 Thread Grant Olson
On 2/25/13 5:54 PM, Peter Loshin wrote: 1. Don't use pgp.mit.edu. Which keyserver *should* be used? I assume that a pool is better than a particular server; is there one particular pool that is preferred? What about http://pool.sks-keyservers.net/? Yep, that's the one you want. 2. On

Re: Questions about OpenPGP best practices

2013-02-25 Thread Doug Barton
On 02/25/2013 02:54 PM, Peter Loshin wrote: Many thanks to Daniel Kahn Gillmor for pointing to the best practices page (https://we.riseup.net/riseuplabs+paow/openpgp-best-practices); this information is very helpful. Some questions about the information on this page: 1. Don't use pgp.mit.edu.

Re: Questions about OpenPGP best practices

2013-02-25 Thread Daniel Kahn Gillmor
On 02/25/2013 02:54 PM, Peter Loshin wrote: 1. Don't use pgp.mit.edu. Which keyserver *should* be used? I assume that a pool is better than a particular server; is there one particular pool that is preferred? What about http://pool.sks-keyservers.net/? You should use hkp:// instead of

Re: Questions about OpenPGP best practices

2013-02-25 Thread Daniel Kahn Gillmor
On 02/25/2013 10:43 PM, Doug Barton wrote: The Best Practices page you posted above actually suggests: keyserver hkps://hkps.pool.sks-keyservers.net keyserver-options ca-cert-file=/path/to/CA/sks-keyservers.netCA.pem That worked for me, although I was a bit disappointed that placing

Re: Questions about OpenPGP best practices

2013-02-25 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/25/2013 11:10 PM, Daniel Kahn Gillmor wrote: | On 02/25/2013 10:43 PM, Doug Barton wrote: | The Best Practices page you posted above actually suggests: | |keyserver hkps://hkps.pool.sks-keyservers.net |keyserver-options

Re: Questions about OpenPGP best practices

2013-02-25 Thread Daniel Kahn Gillmor
On 02/25/2013 11:28 PM, Doug Barton wrote: lots, this one for example: https://help.ubuntu.com/community/GnuTLS hmm, i don't use ubuntu myself, but i believe that documentation is wrong, particularly this section: https://help.ubuntu.com/community/GnuTLS#Deploying_the_Certificates That

Re: Questions about OpenPGP best practices

2013-02-25 Thread Niels Laukens
On 2013-02-26 07:51, Daniel Kahn Gillmor wrote: On 02/25/2013 02:54 PM, Peter Loshin wrote: 1. Don't use pgp.mit.edu. Which keyserver *should* be used? I assume that a pool is better than a particular server; is there one particular pool that is preferred? What about