Re: Most secure GPG combination for Mac OSX

2018-11-07 Thread Werner Koch
On Thu, 8 Nov 2018 07:50, em...@andrewnesbit.org said: > - Enigmail and GPGTools are orthogonal components re: Thunderbird. > Enigmail is something like the interface to the underlying GPG > implementation. In many cases on Mac OS X, including mine, this > underlying implementation is indeed

Re: Most secure GPG combination for Mac OSX

2018-11-07 Thread Andrew Luke Nesbit
Please excuse any previous attempt at posting this, which was sent "From: " the wrong address. On 07/11/2018 20:50, Robert J. Hansen wrote: > GPGTools has some problems in that they can't see the source for Mail.app, and as a result they've sometimes been slower to patch things than Enigmail.

Re: Most secure GPG combination for Mac OSX

2018-11-07 Thread Robert J. Hansen
> Does anyone have suggestions on the most secure and reviewed combination for > bits for sending secure email on OSX?   None of the MacOS builds have received a formal audit. None. The GnuPG codebase as a whole has received audits, but usually in a Linux environment. I'm unaware of any

Re: [openssl-users] OpenSSL vs GPG for encrypting files? Security best practices?

2018-11-07 Thread Bear Giles
FWIW I distrust encrypted drives using hardware encryption. This came out just a few days ago: https://thehackernews.com/2018/11/self-encrypting-ssd-hacking.html: Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data. On Tue, Nov 6, 2018 at 10:15 PM Nicholas Papadonis <

Re: [openssl-users] OpenSSL vs GPG for encrypting files? Security best practices?

2018-11-07 Thread open...@foocrypt.net
Ditto, But don’t tell the Australian Government, it’s probably on their back door request list…;) > On 8 Nov 2018, at 01:26, Bear Giles wrote: > > FWIW I distrust encrypted drives using hardware encryption. This came out > just a few days ago: >

Re: encrypt linux backup folder using gpg

2018-11-07 Thread Francesco Ariis
On Wed, Nov 07, 2018 at 08:56:53AM +0530, Kaushal Shriyan wrote: > Thanks Francesco for the email. I have encrypted the file using my gpg key. > How > do i share the encrypted helloworld.gpg file to the recipients. For example > j...@example.com. Do I need to encrypt the file to the recipients

OpenPGP Card V3.3 keytocard error invalid value

2018-11-07 Thread Antony Vennard via Gnupg-users
Dear gnupg-users, I've recently purchased some v3.3 OpenPGP cards from the floss shop in Germany. I generated keys on my host for testing using nistp521 for the primary key and two sub keys marked for authentication and encryption respectively. I was previously able to move all three keys to a

Re: OpenPGP key verification + legal framework

2018-11-07 Thread Viktor
On 06/11/2018 20:33, Dirk Gottschalk wrote: In the EU the use of "qualified" signature is mandatory if it comes to legal issues. Between private companies it is okay to just use OpenPGP, but, if it comes to legal issues, one party could deny the validity of the signature because it is not

Re: OpenPGP key verification + legal framework

2018-11-07 Thread Viktor
On 06/11/2018 0:42, ved...@nym.hush.com wrote: But suppose I want to use my existing key that I made over 10 years ago, and it is known and trusted by the people I deal with, but it happens to have more than 1 e-mail ID (not rare to switch an e-mail account in 10 years) Does this mean that

Force gpg-agent to send OPTION allow-external-password-cache / SETKEYINFO in _all_ pinentry invocations

2018-11-07 Thread Ivan Shapovalov

Re: encrypt linux backup folder using gpg

2018-11-07 Thread Werner Koch
On Tue, 6 Nov 2018 06:55, kaushalshri...@gmail.com said: > I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder > using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way > to encrypt backupfolder.tar.gz using gpg? Are there any best practices to Sure: