Re: make gpg-agent forget the PIN

2013-11-02 Thread Johannes Zarl
Thanks! That was exactly what I was looking for. Johannes On Friday 01 November 2013 20:17:41 Peter Lebbing wrote: Hi Johannes, Is there any way to explicitly tell gpg-agent to forget the pin as well? Based on a post once made by Werner, I have this script:

Re: make gpg-agent forget the PIN

2013-11-02 Thread Werner Koch
On Fri, 1 Nov 2013 20:17, pe...@digitalbrains.com said: It's called 'scforget' here. Or better: pull off the card and take it with you. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 31/10/13 22:47, Paul R. Ramer wrote: Well, here is my input for your project. I wouldn't be able to communicate sensitive documents without it. Many thanks Paul! Sam. -- Sam Tuke Campaign Manager Gnu Privacy Guard 0044 78680 77871 signature.asc Description: OpenPGP digital signature

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 30/10/13 19:31, Martin Gollowitzer wrote: Unfortunately, this is slightly longer (it's really hard to stick to 130 characters): Yes, it really is :) GnuPG allows for both proving a message's authenticity and preventing eavesdropping. It's

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 31/10/13 08:33, Heinz Diehl wrote: Raised awareness does seldom lead to change (just as knowledge and attitudes). Before developing a strategy on promoting the use of GPG, the barriers which prevent people from using it should be explored and fed back into the implementation strategy.

Re: make gpg-agent forget the PIN

2013-11-02 Thread Peter Lebbing
On 02/11/13 12:26, Werner Koch wrote: Or better: pull off the card and take it with you. I unplug my reader (USB) when I don't use it; I leave the card in. I now have OpenPGP v2 cards, but I earlier had v1 cards that started to malfunction after some time. I had the impression that they were

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 1 November 2013 at 7:25:30 PM, in mid:20131101122530.horde.l0bejumqv5vfmfmqhbr7...@mail.sixdemonbag.org, Robert J. Hansen wrote: But since some of my RD funding comes from the government, I'm just as nefarious as the NSA. [...]

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 1 November 2013 at 6:47:56 PM, in mid:20131101114756.horde.f5rbb0pjwmqx-chco0km...@mail.sixdemonbag.org, Robert J. Hansen wrote: Isn't the NSA a government based organisation? Surely guilt-by-association renders every government

Re: gpgsm and expired certificates

2013-11-02 Thread Robert J. Hansen
I wish to extend my sincere and unreserved apologies to all the people I unintentionally offended. Thank you for this. (Seriously.) There's an American movie that probably hasn't been seen much in Europe. _High Noon_, starring Gary Cooper, which may be the finest Western ever made. In a

Re: gpgsm and expired certificates

2013-11-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 2 November 2013 at 2:36:27 PM, in mid:52750deb.6090...@sixdemonbag.org, Robert J. Hansen wrote: They are not practicing guilt by suspicion. They are practicing, hey, let's collect as much information as possible on this crime

Re: Quotes from GPG users

2013-11-02 Thread Heinz Diehl
On 02.11.2013, Sam Tuke wrote: Research would definitely be helpful. There are many well written guides, video tutorials, and even e-learning courses on how to setup GPG however, and some applications make it very easy. When you think of the common windows user who solely wants to double

Re: Quotes from GPG users

2013-11-02 Thread Heinz Diehl
On 30.10.2013, Sam Tuke wrote: I'll collect them and pick the best for use now and in future. GPG - keeps the XXX from your door! :-) [Replace XXX with any three letter agency of your choice] ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: Quotes from GPG users

2013-11-02 Thread kwadronaut
On 30/10/13 11:58, Sam Tuke wrote: Hi all, I'm working with Werner to promote GnuPG and raise awareness. To that end we're collecting quotes from users - endorsements from people who know and trust GPG, people like you. If you want to help us, send your own statement about why GPG is

Re: Quotes from GPG users

2013-11-02 Thread Johannes Zarl
On Wednesday 30 October 2013 11:58:56 Sam Tuke wrote: I'll collect them and pick the best for use now and in future. Stimuli: You trust GPG with what? It's the only app that does what for you / your business? Without it you couldn't do what? I wonder why not more respondents have written

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/11/13 17:38, kwadronaut wrote: GnuPG might be clumsy, but it gets my message across, to the intendent recipients! Thanks kwadronaut. You're highlighting the signing aspect here I presume? Best, Sam. - -- Sam Tuke Campaign Manager Gnu

Re: Quotes from GPG users

2013-11-02 Thread Sam Tuke
On 02/11/13 17:43, Johannes Zarl wrote: My handwriting is unique. With GPG, so is my email. Brilliant, thanks! Admirably concise. Sam. -- Sam Tuke Campaign Manager Gnu Privacy Guard 0044 78680 77871 signature.asc Description: OpenPGP digital signature

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
Stan Tobias st...@privatdemail.net wrote: Yes, but by remote communication. The reasoning goes like this: The signature is validated by my certificate (or, in case 2a, by my friends' whom I trust fully). The message is authenticated by X's valid signature, therefore the message has not been

Re: gpgsm and expired certificates

2013-11-02 Thread Uwe Brauer
MFPA == MFPA expires2...@ymail.com writes: Hi On Sunday 27 October 2013 at 2:46:05 PM, in mid:8761si4vrm@mat.ucm.es, Uwe Brauer wrote: Isn't the NSA a government based organisation? Surely guilt-by-association renders every government based organisation just as

Re: gpgsm and expired certificates

2013-11-02 Thread Peter Lebbing
On 02/11/13 19:48, Uwe Brauer wrote: So either you claim to have evidence that this modules have been hacked and the key pair is transferred to some of these evil organisations or I really don't see your point. I think the most common way for an X.509 CA to be deceitful is by giving someone

Re: gpgsm and expired certificates

2013-11-02 Thread Filip M. Nowak
On 02.11.2013 20:20, Peter Lebbing wrote: On 02/11/13 19:48, Uwe Brauer wrote: So either you claim to have evidence that this modules have been hacked and the key pair is transferred to some of these evil organisations or I really don't see your point. I think the most common way for an

Re: gpgsm and expired certificates

2013-11-02 Thread Ingo Klöcker
On Saturday 02 November 2013 19:48:39 Uwe Brauer wrote: MFPA == MFPA expires2...@ymail.com writes: Hi On Sunday 27 October 2013 at 2:46:05 PM, in mid:8761si4vrm@mat.ucm.es, Uwe Brauer wrote: Isn't the NSA a government based organisation? Surely

Re: Quotes from GPG users

2013-11-02 Thread Stan Tobias
On 30/10/13 11:58, Sam Tuke wrote: I'm working with Werner to promote GnuPG and raise awareness. To that end we're collecting quotes from users - endorsements from people who know and trust GPG, people like you. If you want to help us, send your own statement about why GPG is important

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
On 11/02/2013 02:25 PM, Leo Gaspard wrote: On Sat, Nov 02, 2013 at 11:02:57AM -0700, Paul R. Ramer wrote: Stan Tobias st...@privatdemail.net wrote: Yes, but by remote communication. The reasoning goes like this: The signature is validated by my certificate (or, in case 2a, by my friends'

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Leo Gaspard
(Sorry, I once again sent the message only to you and not to the list -- I really need to get used to mailing lists, sorry !) On Sat, Nov 02, 2013 at 07:08:15PM -0700, Paul R. Ramer wrote: On 11/02/2013 02:25 PM, Leo Gaspard wrote: Isn't the presence of a UID sufficient for this matter ? No,

Re: trust your corporation for keyowner identification?

2013-11-02 Thread Paul R. Ramer
On 11/02/2013 07:34 PM, Leo Gaspard wrote: Well... 1) Checked by the other key's message. Because signed (K1) message from Alice, saying she has access to K2, means any UID on K2 named Alice is as right as the equivalent UID on K1. So the UIDs are correct. 2) Checked by the