Re: private-key backup

2024-02-17 Thread Francesco Ariis
Hello Byunghee, Il 17 febbraio 2024 alle 14:52 Byunghee HWANG ha scritto: > I have a question. Where is the safest place to store the private-key? > Are there any best practices for this? Do you mean backups? If so, having at least two backup copies of your private key is good practice: - A copy

Re: OT: Best way to send e-mails to a recipient that does know encryption

2024-01-02 Thread Francesco Ariis
Il 02 gennaio 2024 alle 09:40 john doe via Gnupg-users ha scritto: > In other words, how do you use e-mails with a recipient that should be > able to open and reply to e-mails as usual. If email is not a strict requirement, two Matrix can be set up to have an encrypted conversation, same with

Re: Signature

2023-08-29 Thread Francesco Ariis
Il 29 agosto 2023 alle 10:20 isp_stream via Gnupg-users ha scritto: > May I ask why you bring an attached signature in your e-mails and how you make > one in gnupg? Why: you want to assure the content of the email were not tampered with. How: it is taken care of by the client, you don’t manually

Re: Resurrecting the Monkeysphere 

2023-08-12 Thread Francesco Ariis
Hello John, Il 12 agosto 2023 alle 05:56 John Scott via Gnupg-users ha scritto: > I'm bringing back to life the Monkeysphere project which has fizzled > upstream. I love the concept and am willing to rewrite major components and, > more importantly, provide guides and integrations to make the

Re: Public Key

2023-02-26 Thread Francesco Ariis
Hello Richard, Il 26 febbraio 2023 alle 14:09 Richard Bostrom via Gnupg-users ha scritto: > May I please ask why some 4096 bit keys are longer then others? > > Richard Stallmans key is much longer then my 4096 bit key. I suspect: signatures. They make keys longer —F

Re: Public keys stored on different server

2023-02-01 Thread Francesco Ariis
Hello Martin, Il 01 febbraio 2023 alle 10:32 Martin ha scritto: > More and more I see messages which are signed - but the author didn't > store his public key on a keyserver (eg. hkps://keys.openpgp.org) - > sometimes a footnote in the massages gives a link where the key could > be downloaded.

Re: Does the PGP public key at https://www.washingtonpost.com/anonymous-news-tips/

2022-08-05 Thread Francesco Ariis
Il 05 agosto 2022 alle 18:13 Michael Richardson ha scritto: > Francesco Ariis wrote: > > Il 05 agosto 2022 alle 17:28 Jay Sulzberger via Gnupg-users ha scritto: > >> Does the PGP public key at > >> https://www.washingtonpost.com/anonymous-news-tips/ work

Re: Does the PGP public key at https://www.washingtonpost.com/anonymous-news-tips/

2022-08-05 Thread Francesco Ariis
Hello Jay, Il 05 agosto 2022 alle 17:28 Jay Sulzberger via Gnupg-users ha scritto: > Does the PGP public key at https://www.washingtonpost.com/anonymous-news-tips/ > work? It gets copied in a weird way (i.e. some characters that should be newlines are instead spaces); I am not able to import it.

Re: Backing up your PGP key by hand

2022-05-25 Thread Francesco Ariis
Il 25 maggio 2022 alle 21:13 Johan Wevers via Gnupg-users ha scritto: > On 2022-05-23 5:01, Stuart Longland via Gnupg-users wrote: > > > On the other hand, there are paper recordings that have lasted millennia. > > Since paper as we know it today doesn't even exist so long that can't be > true.

Re: Backing up your PGP key by hand

2022-05-03 Thread Francesco Ariis
Hello Jonathan, Il 02 maggio 2022 alle 13:26 Jonathan Cross via Gnupg-users ha scritto: > Thank you for sharing this Francesco. > > Yes, having a secure, durable offline backup is important. > > Coming from the Bitcoin space, we've already explored many options in an > effort to allow users

Backing up your PGP key by hand

2022-04-24 Thread Francesco Ariis
Hello gnupg-users, I decided to back up my secret gpg key with pencil and paper, documenting the process here http://ariis.it/static/articles/handwritten-pgp-key/page.html It is tangent to gpg but I thought that other gnupg-users might have been interested in the whys and hows of the

Re: PGP Anonymous Board Idea

2019-03-05 Thread Francesco Ariis
Hello Farhan, On Tue, Mar 05, 2019 at 02:39:37PM -0500, Farhan Khan via Gnupg-users wrote: > I had an idea for an anonymous PGP messaging board system and wanted to get > feedback on it or know if this idea has already been done. > > In short, this would be an anonymous messaging system where

Re: How to start gnupg?

2018-12-02 Thread Francesco Ariis
Hello John, On Sat, Dec 01, 2018 at 10:33:35PM +, John Broyles wrote: > I have a large file that was encrypted with PGP and I want to decrypt it. Was encrypted by whom? Usually gpg tutorials start from creating your own key (which you and your friends can use to encrypt files to you), but

Re: encrypt linux backup folder using gpg

2018-11-07 Thread Francesco Ariis
On Wed, Nov 07, 2018 at 08:56:53AM +0530, Kaushal Shriyan wrote: > Thanks Francesco for the email. I have encrypted the file using my gpg key. > How > do i share the encrypted helloworld.gpg file to the recipients. For example > j...@example.com. Do I need to encrypt the file to the recipients

Re: encrypt linux backup folder using gpg

2018-11-06 Thread Francesco Ariis
On Wed, Nov 07, 2018 at 08:10:48AM +0530, Kaushal Shriyan wrote: > Hi Francesco, > > Whom do i need to contact to correct the examples provided in manual page? I opened a bug in Debian yesterday (after replying to you), albeit with no patch:

Re: encrypt linux backup folder using gpg

2018-11-06 Thread Francesco Ariis
On Tue, Nov 06, 2018 at 05:32:40PM +0530, Kaushal Shriyan wrote: > [centos]# ls helloworld/ > check_cpu_perf.sh check_mem.pl jdk-8u162-linux-x64.rpm > [centos]# gpg-zip --encrypt --output hellogpg --gpg-args -r kaushal Ah, the example in the manual is wrong. This should work gpg-zip

Re: encrypt linux backup folder using gpg

2018-11-06 Thread Francesco Ariis
Hello Kaushal, On Tue, Nov 06, 2018 at 11:25:47AM +0530, Kaushal Shriyan wrote: > I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder > using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way > to encrypt backupfolder.tar.gz using gpg? Are there any best

Re: a bunch of questions

2017-11-10 Thread Francesco Ariis
On Fri, Nov 10, 2017 at 12:27:22AM -0500, charlie derr wrote: > I believe that the key I'm signing this message with is 2048 bits and > will expire next year. If I've got either of those details wrong, please > correct my error(s). [...] Hello Charlie, I see no expiration date on your key

Re: FAQ and GNU

2017-10-09 Thread Francesco Ariis
Hello Robert, On Mon, Oct 09, 2017 at 10:06:17PM -0400, Robert J. Hansen wrote: > A request has been made that each instance of "Linux" in the FAQ be > replaced with "GNU/Linux". A request has been made by whom? > I'm not inclined to make this change. However, in order to make sure > that the

Re: Error verifying signature: Cannot verify message signature: Incorrect message format

2017-05-08 Thread Francesco Ariis
On Mon, May 08, 2017 at 08:58:59AM -0500, Chris wrote: > I've noticed the above recently when I see a post from certain users > including myself in a couple of the Ubuntu mailing lists. I don't see > issues in other lists I'm on nor does it happen if I ask the sender of > the post to send me a

Re: some beginner questions

2017-04-01 Thread Francesco Ariis
Hello Will, I'll answer 1. 2. and 4. (3. is beyond my knowledge): On Sat, Apr 01, 2017 at 09:10:55AM -0500, Will Senn wrote: > 1. It seems that the keyservers never forget. In creating keypairs while > trying to figure this out every few years and then forgetting the > passwords or losing the

Re: Renewing expired keys

2017-01-15 Thread Francesco Ariis
On Sun, Jan 15, 2017 at 02:36:08PM -0500, Rick Nakroshis wrote: > Been a while since I used my GPG installation, and my keys have expired. > Looking at the docs, I see how to set up an initial set of keys, but how > about a follow-on set? Do I generate a new set with same email address, > and

Re: GPL license responsibility

2016-08-31 Thread Francesco Ariis
On Wed, Aug 31, 2016 at 09:49:26AM +, Dimitrova Elena wrote: > I will not alter any part of the source code. In this case what are > my obligations under the GPL license? Hello, GPL obligations happen when you *distribute* software. In this case you are not (re)distributing GPG or any

Re: Attacks on encrypted communicxatiopn rising in Europe

2016-08-24 Thread Francesco Ariis
On Wed, Aug 24, 2016 at 09:17:19AM -0400, Robert J. Hansen wrote: > > You can try - someone might have used a weak password, wrote it down > > somewhere or made another mistake. Or can be pressured into telling it > > (the famous $5 wrench comes to mind here). > > Wait, wait, wait. > > You're

Re: Attacks on encrypted communicxatiopn rising in Europe

2016-08-24 Thread Francesco Ariis
On Wed, Aug 24, 2016 at 04:42:34AM -0400, Robert J. Hansen wrote: > I'd shrug and point to my many public statements where I've supported > strong, non-backdoored privacy tools. If someone wants to accuse me of > being a government absolutist, that's on them. Then let me ask you how "I have

Re: Attacks on encrypted communicxatiopn rising in Europe

2016-08-23 Thread Francesco Ariis
On Tue, Aug 23, 2016 at 10:26:17PM -0400, Robert J. Hansen wrote: > Some serious questions -- > > 1. Are you a privacy absolutist? > 2. If yes, why should we listen to you? Privacy and its boundaries are a well debated (and well worth to be debated) topic; keep in mind that any

Re: 2 Q's

2016-08-15 Thread Francesco Ariis
On Mon, Aug 15, 2016 at 06:33:47AM -0700, Daniel H. Werner wrote: > 2) What is the best way to automatically send my Public Key to message > recipients? Why not upload it to your site (if you have it) or to a keyserver? ___ Gnupg-users mailing list

Re: Remove photos from OpenPGP key in the keyservers

2016-03-08 Thread Francesco Ariis
On Tue, Mar 08, 2016 at 06:00:30PM +0100, Viktor Dick wrote: > I always wondered what would happen if someone uploaded something to the > keyservers where he has no permission to do so. An interesting presentation on the subjest is "Trolling the Web of Trust" [1] by Micah Lee. [1]

Re: How to prevent emacs from unencrypting my files

2016-02-23 Thread Francesco Ariis
On Tue, Feb 23, 2016 at 06:27:51PM -1000, John Helly wrote: > Hi. > > I've just discovered that emacs can unencrypt my *.gpg files without > prompting for a password. IMHO this largely negates the purpose of > encrypting files in case I lose my laptop. > > What's the logic behind this? I know

Re: What's the contextual definition of the term?... signature

2016-01-28 Thread Francesco Ariis
On Wed, Jan 27, 2016 at 09:08:43PM -0500, Don Saklad wrote: > What's the contextual definition of the term?... signature > as this term is used for GNUpg Since you have only received (not so) funny answers: a signature, in PGP, serves more or less the same purpose of a handwritten one. Most of