Android and E2E security

2013-12-13 Thread NdK
Hi all. Seems someone is actively working on securing phones in an user-effortless way... http://www.techthefuture.com/technology/cyanogenmod-brings-system-wide-secure-messaging-to-android-phones I've only had a quick look at it and something yet doesn't sound right, but might be just an

Sharing/Storing a private key

2013-12-13 Thread Mindiell
Hello, I'm using GPG regularly and did want to save my private key. On the IRC channel someone linked me to paperkey : http://www.jabberwocky.com/software/paperkey/ While this project is really interseting, it does not fit my needs. I found (http://point-at-infinity.org//)

Another step towards crowdfunding

2013-12-13 Thread Werner Koch
Hi, you may want to check out http://blog.gnupg.org which has more infos on the upcoming campaign. Sorry, for all that Javascript stuff. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users

Re: show-uid-validity default to yes

2013-12-13 Thread Werner Koch
On Thu, 12 Dec 2013 20:37, pe...@digitalbrains.com said: I think it's a good idea. It's a vital piece of information if you actually The majority of users are using a GUI and thus the command line version does not matter at all. Although people should know better, I am pretty sure that there

Re: Another step towards crowdfunding

2013-12-13 Thread Christophe Brocas
Le 13/12/2013 15:34, Werner Koch a écrit : Hi, you may want to check out http://blog.gnupg.org which has more infos on the upcoming campaign. Sorry, for all that Javascript stuff. Hello Werner A lot of good news currently in the free software crypto area :) : * impressive roadmap news

Re: show-uid-validity default to yes

2013-12-13 Thread Peter Lebbing
On 13/12/13 15:37, Werner Koch wrote: The majority of users are using a GUI and thus the command line version does not matter at all. I suppose when those people have questions they go the mailing list of the GUI in question, but still, since there is an amount of more-or-less newbies coming

Re: Another step towards crowdfunding

2013-12-13 Thread Werner Koch
On Fri, 13 Dec 2013 17:05, christophe.bro...@cnamts.fr said: * a very lean and clean GnuPG blog design :) and excellent promotional video ! I was somehow able to convice Sam not to install Wordpress like blogging software right now. Which also means that for comments you need to resort to

Re: show-uid-validity default to yes

2013-12-13 Thread Werner Koch
On Fri, 13 Dec 2013 17:04, pe...@digitalbrains.com said: Has it ever been researched in which way users use GnuPG? A part of the GUI users might also still use the command line for certain things. My guess is that the majority of GnuPG users are not aware that they are using GnuPG. They see

Re: show-uid-validity default to yes

2013-12-13 Thread Hauke Laging
Am Fr 13.12.2013, 15:37:59 schrieb Werner Koch: The majority of users are using a GUI and thus the command line version does not matter at all. Strange argument IMHO. Would you say the same about Linux? 99% of the desktop users don't know that there is a shell / console layer thus it's not

Re: show-uid-validity default to yes

2013-12-13 Thread Daniel Kahn Gillmor
On 12/13/2013 02:09 PM, Werner Koch wrote: I estimate that not more than 1% of all GnuPG users are using gpg in the shell. this sounds like an argument for being willing to change the human-readable output on the shell -- there are not many people looking at it anyway, and most of those people

Re: show-uid-validity default to yes

2013-12-13 Thread Werner Koch
On Fri, 13 Dec 2013 21:05, mailinglis...@hauke-laging.de said: Maybe. But it is trivial to check whether gpg runs as part of a script, isn't it? It already does so today. I have forgotten where it is done but some Huh? It is impossible without using a lot of heuristics and knowledge of the

Re: show-uid-validity default to yes

2013-12-13 Thread Werner Koch
On Fri, 13 Dec 2013 21:24, d...@fifthhorseman.net said: this sounds like an argument for being willing to change the human-readable output on the shell -- there are not many people looking at it anyway, and most of those people are sophisticated user. It is a Unix tool and people want to have

Re: Another step towards crowdfunding

2013-12-13 Thread Micah Lee
Hi, I think this is my first post to this list, but I've been a lurker for a bit. This campaign looks pretty awesome. I tweeted the video and it's getting some pickup: https://twitter.com/micahflee/status/411569314097934336 I hope you don't mind a bit of feedback. On 12/13/2013 10:57 AM, Werner

Re: Another step towards crowdfunding

2013-12-13 Thread Micah Lee
Hi, I think this is my first post to this list, but I've been a lurker for a bit. This campaign looks pretty awesome. I tweeted the video and it's getting some pickup: https://twitter.com/micahflee/status/411569314097934336 I hope you don't mind a bit of feedback. On 12/13/2013 10:57 AM, Werner

Re: show-uid-validity default to yes

2013-12-13 Thread Daniel Kahn Gillmor
On 12/13/2013 04:27 PM, Werner Koch wrote: On Fri, 13 Dec 2013 21:24, d...@fifthhorseman.net said: I think for a piece of critical security infrastructure, GPG has been supporting some insecure practices for far too long. Why do you think this is insecure? Because gpg does not encrypt to a

Revocation certificate for sub key?

2013-12-13 Thread adrelanos
Hi, Is it possible to create a revocation certificate just for sub keys and not the master key? This would be useful for offline master keys. Trusted persons could be given the revocation certificate for sub keys and send it to key servers when they suspect compromise. But should the sub key

Re: Revocation certificate for sub key?

2013-12-13 Thread Hauke Laging
Am Fr 13.12.2013, 22:56:07 schrieb adrelanos: Hi, Is it possible to create a revocation certificate just for sub keys and not the master key? --edit-key 0x12345678 key 1 revkey Hauke -- Crypto für alle: http://www.openpgp-schulungen.de/fuer/unterstuetzer/